Clik here to view.
MacProtector is yet another MacDefender variant
A number of people are reporting yet another MacDefender variant this morning. This time, it’s named MacProtector, but it sounds like the method of operation is the same. Mac users should be on their...
View ArticleClik here to view.
Identifying and removing MacDefender trojans
[Edited Thursday, May 26, 9:20 PM] A lot of people are being affected by MacDefender, or one of the variants of MacDefender (MacSecurity, MacProtector and MacGuard, at this time, possibly more in the...
View ArticleClik here to view.
Further analysis of MacProtector
There have been reports circulating that MacDefender/MacSecurity/MacProtector may be doing nasty things like scanning the hard drive and sending data home. If this is true, it would be a more serious...
View ArticleClik here to view.
Minor new MacProtector variant
A colleague sent me a slightly different variant of MacProtector recently, with a creation date of 5/11/2011. I haven’t had time to do any really detailed analysis of it, and I’m not sure that the...
View ArticleClik here to view.
Apple responds to MacDefender
Apple posted their own support document today, titled How to avoid or remove Mac Defender malware, in which they describe how to respond to this malware. Their removal instructions are essentially...
View ArticleClik here to view.
Yet another MacDefender variant: MacGuard
Another new trojan has appeared in the MacDefender/MacSecurity/MacProtector line. This time it’s called MacGuard. From the initial reports, it does not sound like it is significantly different in...
View ArticleClik here to view.
MacGuard details
I managed to get my hands on a copy of MacGuard this evening, and ran it through some tests to try to clarify some of the rumors floating around. The good news is that, in all, this is just another...
View ArticleClik here to view.
Apple releases security update for MacDefender
Apple released Security Update 2011-003 today, addressing the MacDefender issue. According to Apple’s documentation on this update, there are three basic additions to assist in dealing with the...
View ArticleClik here to view.
MacDefender variants slip past security software
More and more reports of new variants of MacProtector, including one now called MacShield, are circulating the internet. Some of them appear to have been modified just enough to be able to slip past...
View ArticleClik here to view.
More new tricks from Flashback
Intego has announced the discovery of yet another variant of Flashback. The new variant, called Flashback.N, is based on the previous Flashback.G, and it also uses Java to get its dirty work done....
View Article