Apple to issue update to 'automatically find and remove' Mac Defender malware
Summary: Apple has released an advisory that describes how to both avoid and remove Mac Defender malware from affected systems.
Apple has released an advisory that describes how to both avoid and remove Mac Defender malware from affected systems.
The advisory outlines how to prevent infection, how to force quit the Safari browser and also offers up step-by-step guidance on how to remove the malware.
By wait, there's more!
In the coming days, Apple will deliver a Mac OS X software update that will automatically find and remove Mac Defender malware and its known variants. The update will also help protect users by providing an explicit warning if they download this malware.
Now this is both a good move and a bad move all rolled into one. It's a good move that Apple is starting to take the problem seriously and is taking steps to deal with it. However, I'm not sure how effective it will be in the long run to keep on issuing OS X patches and updates in order to protect Mac users from Mac malware. With one threat it's OK, but if that one threat multiplies into tens or hundreds or possibly thousands of threats, this is going to be come unwieldy real fast.
Also, in the world of security software, a time period measured in 'the coming days' is a geological timescale. Threats evolve quickly and if Apple is going to keep on top of things it is going to have to learn to move faster.
But, as Chester Wisniewski, Senior Security Advisor at Sophos, points out, Apple is a security newbie and has a lot to learn ... starting with proper use of terminology: I have to admit though, as a newbie, it appears that you may have some confusion in your terminology.
You state in your article:
"A recent phishing scam has targeted Mac users by redirecting them from legitimate websites to fake websites which tell them that their computer is infected with a virus."
In our business phishing has a very specific definition.
Oops. I'm sure they'll learn.
That said, after testing Apple's own tech support yesterday, I think that the advice given to those affected is pretty solid - install security software to remove the threat.
Personally though, I think Apple should take some of that massive cash pile it is sitting on and buy a security firm.
Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.
Talkback
more of a bad move than good me thinks
RE: Apple to issue update to 'automatically find and remove' Mac Defender malware
And what do you suggest Apple should do in this situation? What has happened is a socially engineered piece of malware has been put out there, to scam Mac users. This same piece of Malware also affects Windows users, if they are stupid enough to install it. Any security measure can be defeated by the person at the keyboard. I remember the days, when using Outlook, that you could get infected by a virus, simply by having the preview pane open.
There's a (Job) App(lication) for that!
*** Why has this post been flagged?? ***
RE: Apple to issue update to 'automatically find and remove' Mac Defender malware
Genrally when someone says that person (or Company) A is doing something the wrong way, it indicates that they know a better way to do it. There is no Anti-Virus that will stop the uneducated from installing a trojan. I personally think educating people is the best bet. I personally do not think OS X will ever be the malware target that Windows is. My reason is this: there are many $399 specials at Walmart, and people that tend to buy cheap computers are not as well educated as those that either build their own, or purchase better made hardware. So Trialer-park Tammy, or Welfare Walter will always be the users that get most of the malware.
RE: Apple to issue update to 'automatically find and remove' Mac Defender malware
Looks like a Trialer-park Tammy, or Welfare Walter flagged you.
lol...
RE: Apple to issue update to 'automatically find and remove' Mac Defender malware
RE: Apple to issue update to 'automatically find and remove' Mac Defender malware
RE: Apple to issue update to 'automatically find and remove' Mac Defender malware
Did you even read my post?
I think not, because I said....
<i>And before some of you jump down my throat and say it's not a Mac OS security issue, I realise that, but the problem is that there's now more malware TARGETING the Mac OS and this is only going to increase.</i>
My point was that it seems to me that Apple hasn't got a well thought out plan for how to deal with malware.
I don't believe I made any comment on whether Mac's or PC's were more/less secure. No matter what OS you use the user is always the weakest link in the fight against malware these days so these flamed debates about which OS is more secure are pretty pointless. It's now more about which target OS users are more likely to:
1) have access to money that the hacker can steal
2) be trusting (some may say stupid) enough to fall for the scam
3) be a large enough user base to make the development time worthwhile financially
I'll let you decide where Mac users fall on the first 2 points, but there's no denying that the Mac OS has a much bigger user base than say 10-15 years ago and now presents a desireable target for hackers, along with the millions of iOS device users.
PS have you see the news today... there's a new more craftier version of Mac Defender out there and it doesn't always need you to enter the Admin password. So will Apple now release another OS update??
You are poorly informed
Apple added this system with the introduction of 10.6. It shipped with 2 definition files and has been updated over the months with 3 additional definitions. In the past Apple had knowledge about most files before they were in the wild and this system worked perfectly, but with mac defender things happened more quickly and some people were caught, but that doesn't make this a bad choice.
To quote an old joke "Apple doesn't have to be faster than the Bear......". Apple just has to keep making the Mac OS platform unprofitable. It has a leg up by being smaller and by having users who tend to stay more up to date with their OS and patches. This keeps infections low to non-existant and encourages malware writers to find other targets.
This may be one of the last times I get to say this but as of today, there is little to no reason to waste time or money with Anti-virus software on a mac beyond what Apple provides.
You've just proved my point
<i>In the past Apple had knowledge about most files before they were in the wild and this system worked perfectly, but with mac defender things happened more quickly and some people were caught...</i>
Exactly! Apple's malware strategy is fine for old skool malware issues, but it's all looking a bit inadequate now with this Mac Defender thing.
I'm not attacking Mac OS security credentials here people... I'm just saying that it doesn't seem that Apple have a malware mitigation strategy that's adequate for dealing with today's malware attacks... let alone what's to come
RE: Apple to issue update to 'automatically find and remove' Mac Defender malware
I don't think its a mistake for Apple to offer this fix. Microsoft does this every month with MRT. I believe Apple could implement something like this for their OS and I think it would show their customers that they care and have a plan for protecting their systems.
Bert
MRT != OS Update
RE: Apple to issue update to 'automatically find and remove' Mac Defender malware
Depending on how you see it. Adding something in an OS update that can be updated on its own is not a new thing. Updating the OS to add new functionality is indeed an update. If they add in a tool to remove malware, and that tool updates itself, then there will not be updates each time a new piece of malware comes out.
RE: Apple to issue update to 'automatically find and remove' Mac Defender malware
Exactly... <i>IF they add in a tool to remove malware, and that tool updates itself, then there will not be updates each time a new piece of malware comes out.</i>
So, is this what Apple are doing? If so, what's this tool called and can I choose whether to install this tool and updated it or not. Do I need to test these malware removal updates etc.
This is exactly what I'm talking about. Where does this OS update fix for Mac Defender fit into Apple's malware strategy going forward.
RE: Apple to issue update to 'automatically find and remove' Mac Defender malware
RE: Apple to issue update to 'automatically find and remove' Mac Defender malware
If only Microsoft had fixed Vista in two weeks, it's history would have been different.
RE: Apple to issue update to 'automatically find and remove' Mac Defender malware
Of course it couldn't have been
The 10's of thousands (according to Ed) of help calls Apple received regarding this malware? It was a few enraged bloggers and a few dozen forum participants that did it?
RE: Apple to issue update to 'automatically find and remove' Mac Defender malware
A combination of both I'm sure. At least Apple is willing to help now.