ie8 fix
madison

Hardware 2.0

Adrian Kingsley-Hughes

Apple releases 'Mac Defender' security update

By | May 31, 2011, 1:40pm PDT

Summary: Apple has just released a security update for Mac OS X that is designed to detect and remove Mac Defender malware. But unless you’re running the latest ‘Snow Leopard’ version, you’re outta luck.

Apple has just released a security update for Mac OS X that is designed to detect and remove Mac Defender malware. But unless you’re running the latest ‘Snow Leopard’ version, you’re outta luck.

Apple security update 2011-003 (only for Snow Leopard) consists of three components:

File Quarantine
Malware detection definitions for OSX.MacDefender.A has been added to the File Quarantine system.

Automatic Updates
The system will check daily for updates to the File Quarantine malware definition list. An opt-out is available.

Malware Removal
The update will scan and remove Mac Defender and known variants.

This update is available for Mac OS X v10.6.7 and Mac OS X Server v10.6.7 (if you’re using an earlier version of Mac OS X, tough, Apple doesn’t love you) via Software Updates or via Apple Downloads. No reboot required.

Hello Mac OS X users, welcome to the world of daily malware signature updates.

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Adrian Kingsley-Hughes is an internationally published technology author who has devoted over a decade to helping users get the most from technology.

Disclosure

Adrian Kingsley-Hughes

All opinions expressed on Hardware 2.0 are those of Adrian Kingsley-Hughes. Every effort is made to ensure that the information posted is accurate. If you have any comments, queries or corrections, please contact Adrian via the email link here. Any possible conflicts of interest will be posted below. [Updated: February 23, 2010] - Adrian Kingsley-Hughes has no business relationships, affiliations, investments, or other actual/potential conflicts of interest relating to the content posted so far on this blog.

Biography

Adrian Kingsley-Hughes

Adrian Kingsley-Hughes is an internationally published technology author who has devoted over a decade to helping users get the most from technology -- whether that be by learning to program, building a PC from a pile of parts, or helping them get the most from their new MP3 player or digital camera.

Adrian has authored/co-authored technical books on a variety of topics, ranging from programming to building and maintaining PCs. His most recent books include "Build the Ultimate Custom PC", "Beginning Programming" and "The PC Doctor's Fix It Yourself Guide". He has also written training manuals that have been used by a number of Fortune 500 companies.

Adrian also runs a popular blog under the name The PC Doctor, where he covers a range of computer-related topics -- from security to repairing and upgrading.

30
Comments

Join the conversation!

Just In

RE: Apple releases 'Mac Defender' security update
nomorebs Updated - 2nd Jun
@AHK: Yes, but this post is not about hardware, is about a software update that is not even a driver or something like that.

If you are going to follow that logic you should also blog about, for _example_, scientific calculators
implements malware protection. It just isn't for MacDefender, but anything that shows up in the File quarantine database.
@fr_gough

Since people has to have three level of cluelessness to actually harmed by this (comparing to PC counterparts, where such social engineering technologies much more effective):
http://www.zdnet.com/tb/1-97915-1892322
@denisrs You act like the attack vector is different from the majority of Windows malware. Guess what? There are more "clueless" people that use computers than there are techies. To act like this isn't a problem is silly. And Apple agrees with me here, because they released a solution specifically dealing with this problem.
@AHK: what does this have to do with "Hardware 2.0"?
0 Votes
+ -
Contributr
@nomorebs
Adrian Kingsley-Hughes 31st May
... Macs are hardware, right?
0 Votes
+ -
@denisrs
Nope still have to enter username and password on windows.
So the malware problems are basically identical.
0 Votes
+ -
@denisrs
At the great risk of sounding repetitive, I have to say, your so much beyond wrong about something like this on a PC, that you are in fact completely wrong.

The only exceptions to just how wrong you are would be in the instance of what I hope is a very narrow band of morons who use a PC without any kind of AV installed. I can personally attest to the fact, that for example the AVG free edition stops this particular attack dead in its tracks before it can do anything. This was so on the very day Ed posted his first story on this attack. This is the kind of result anyone with a PC with updated AV should get for this kind of attack.

It should also have been the result for any Mac user with updated AV installed. The whole story really should have been a none issue and would likely have been if this was a PC centric problem. There are always plenty of attacks set up for PC's but simple AV programs are pretty thorough these days at shutting such things down like this. While I know there will be those Mac users out there who will still believe that installing an AV program is an admission of defeat in the "My OS is bullet proof" argument, they had better start facing facts. And that fact is, if Apple users do not start getting with the program, a PC with antivirus will soon be much safer then a Mac without AV.
0 Votes
+ -
@AHK: Yes, but this post is not about hardware, is about a software update that is not even a driver or something like that.

If you are going to follow that logic you should also blog about, for _example_, scientific calculators
@fr_gough Except File Quarantine isn't new, it's been around for a while.
lol - I guess this is Apple's "Patch Tuesday"
@Bookmark71

Close, they still release patches whenever they feel like.
Piece of cake, 2.1Mb, 30 seconds download, done.
0 Votes
+ -
Thats kind of funny.
Cayble 1st Jun
@bjames3
"Piece of cake, 2.1Mb, 30 seconds download, done"

Ya, and it should be a peice of cake. It shouldnt be a big deal of any kind.

I hope the only reason you said the peice of cake thing was to convince uncaring Mac users that this is something they make sure they get done because its "a peice of cake".

I hope you didnt say that to try and say that because the update was a peice of cake to do, the whole thing is a none issue.

It just seems like an odd comment.
long way to go, Apple
@Dum0nt

Security updates are still around for Leopard, but Malware scanning is a Snow Leopard feature. Most users are on Snow Leopard now - Mac users tend to update a lot faster than Windows users (cheaper and easier).
0 Votes
+ -
Now they acknowledge and remove it when just a week ago they said they wouldn't. Pretty poor customer service.
0 Votes
+ -
"The system will check daily for updates to the File Quarantine malware definition list."

I thought that was something only PC users had to deal with? wink
@AHK: what does this have to do with "Hardware 2.0"?
"... Macs are hardware, right?"

Macs are. SOFTware, like an OS or malware are not.
@Serton

Macs are hardware, OS X is the default OS on a Mac, and Mac Defender is the latest malware to target OS X.

Regardless, what was your point?
@rtk

Subtle point perhaps, but the attack is on the user, not the OS i.e, there is no vulnerability in OS X itself that is the target of an exploit here. OS X users can be tricked into installing malicious software on their Macs, as can Windows users on their PCs. What's to argue about?

Disclosure: I run OS X, Windows and Linux on my Macbook.
0 Votes
+ -
Message has been deleted.
the Tea Lady Updated - 1st Jun
0 Votes
+ -
RE: Apple releases 'Mac Defender' security update
OtterWithKids Updated - 1st Jun
"This update is available for Mac OS X v10.6.7 and Mac OS X Server v10.6.7 (if youre using an earlier version of Mac OS X, tough, Apple doesnt love you)"

True, but let's be fair here: if someone's running Mac OS X v.10.6.0–10.6.6, the 10.6.7 update is a free download with no known drawbacks. I wouldn't bother with earlier versions of Snow Leopard, either.

As for non–Snow Leopard users, does Mac Defender even work on systems running 10.6?
It seems really great news, Ballmer is paying bonuses, security firms will soon follow. Day in day out we read about the Mac Defender. Never seen it myself in the wild yet, but we are talking about a storm in a glass water. Why don't the Microsoft people blog about the daily discovered MS malware?
0 Votes
+ -
As per McDonalds..

BA DA BA BA BA, I'm a Mac and I get Malware.

BA DA BA BA BA, I'm LOVIN IT!!!!!
0 Votes
+ -
RE: Apple releases 'Mac Defender' security update
partman1969@... Updated - 2nd Jun
@IamNot-iNaive
This is the only known USER EXECUTABLE known malware to hit OSX. Your so happy because malware is spreading through the cyber universe. I fail to see your amusement. Every time my Antivirus scanner catches or scans my PCs I only feel disgust toward the puke writing the malware. If you were to break a leg would it make you feel better if I broke mine. This seems to be your logic.
in 2:41 in the video has some nice assets. This is sad from so many points I don't know where to begin.
0 Votes
+ -
Comment Removed
0 Votes
+ -
Sooo wait...
Fletchguy 1st Jun
Apple said there was no malware infecting now they have a patch thats does a half butt job stopping it...Then apple users claim macs don't get infected but yet here is video proof..sooooooo basically apple and it's user woke up to reality and are just confused now lol
0 Votes
+ -
@Fletchguy
No confusion, just cancel the install and it never loads.
0 Votes
+ -
Confused is right!
derekgore 1st Jun
It is identical to when the Apple folks were chanting "Evil Wintel" for years to indicate the conspiracy against Apple by Windows and Intel which conspiracy coincidentally did not exist. The proof? Apple switched their PCs to Intel chips. Half of the evil Wintel conspiracy.

Funny thing about these apple fanatics and I don't mean the 90% rational apple owners. When there is no conspiracy they believe there is. When there are infections in Apple land they believe there aren't.

Man they are in full blown denial and defense mechanisms, and might as well cover their ears and shout La lalalalalalalala!

It took the Apple faithful about a month to change gears and drop the evil Wintel designator, and some still smolder about that and the way Apple left their classic software in the dust at the time they switched. For those that don?t know what I am talking about just Google ?evil wintel.?

From evil to part of the faith? LOL! Or did they do a deal with the devil?

It is the same thing with their claims about Windows infections being different, when all of them are pretty much social engineering and require several clicks to allow most of them, or opening an infected attachment.

Their misunderstanding of the term malware, and their claimed expertise in malware definitions trying to teach us, while claiming no experience with malware of any type?? Virus versus Trojan makes little difference when you are infected. And Apple folks you need to understand that those of us running Windows boxes don't get snagged by social engineering, scareware, ransomware, or any viruses or trojans already known, if we are above average users either.

If the apple faithful posting here in denial, are refugees from Window, who were constantly getting infected and now are starting to realize that they might have to actually learn more than how to turn it on and go to websites and read email, then welcome to the real world.

I don't support the 10% Windows Fanatics either. While I knew that Apple has been broached many times by experts, just like Windows, the criminals didn't want to go through all the work writing malware of any type for a small user base.

I am not happy that some of my friends who use Apple computers are now becoming targets too. The security by obscurity days are over. They should ramp up now as time goes on. You see one advantage to not having a large user base is that the script kiddies who do 90% of all malware are all familiar with Windows and haven't switched to Apple systems by and large. There are very few original top notch malware writers of original malware.

But the reality is that that obscurity has changed and as Apple systems expand their user base into the iPad markets it will behoove the criminals behind the malware to learn the system and breach it if they want to continue their ill-gotten income levels.

Most of the folks here claiming expertise don?t realize that originally malware was more benign and was a point of claiming to be the best in the cracking/hacking group. It was more about being the best programmer than stealing as it is today. With continued comments from the Apple folks they have already set up the challenge. If OSX is indeed the best OS then the malware writer who consistently cracks it will be the king of the hill so to speak. You are daring them! LOL!

Where the Windows and Apple 10%r fanatics are dead wrong is that it isn't Apple users against Windows users, and really never was except in a delusional state.

We are all the same using our personal computers, Apple or Windows based, for our families, work, and pleasure.

For me it has never been a case of envy or thinking a piece of hardware or software makes me a better person or not. As if it would.

It has always been us against the criminals. In the real world protecting our possessions, and defending our families and friends, many of us going to war to defend our shores.

You see it has always been, in the real world, us against the criminals and monsters. It is no different in the cyber world.

When the enemy is rushing your position it does no good to cover your ears and go lalalalalala against bullets. Saying that they have green coats instead of khaki won't help either. And arguing whether they are using 7.62 ammo or 5.56 only gets you killed because you are spending the time arguing that you could have put to use defending.

But that analogy is probably distasteful to some. The gated communities are the same as firewalls. The police and security guards the same as the anti-malware programs. When the criminal gets through them, then the question is do you know enough to defend yourself until you can get help? Do the right thing to avoid an infection and loss of data?


Welcome to reality Apple users.

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix
Click Here
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix
ie8 fix