- iTunes Match: What you need to know
- French Designer Philippe Starck says Apple Will Release 'Revolutionary' Product
- Apple announces dividend and stock buyback
- Near Riot at iPhone 4s debut in China.
- Can You Use Separate Apple IDs for iCloud and iTunes Store?
- Apple Won't be Streaming iPhone 4S/5 event
- iPhone 5 to be Announced October 4, 2011
- MAC Defender Update - Variation bypasses Apple's security update
- Mac Defender Malware alert
- Apple's iCloud music service to scan, mirror iTunes libraries
MAC Defender Update - Variation bypasses Apple's security update
A day after Apple released a security update that targets the MAC Defender malware, a new variation has ben spotted.
The new variation of MAC Defender, named "Mdinstall.pkg," has been crafted to bypass the new malware-blocking code made available by Apple. That update for Mac OS X, Security Update 2011-003, was released on Tuesday.
"The file has a date and time stamp from last night at 9:24PM Pacific time," Bott wrote. That's less than 8 hours after Apple's security update was released. On a test system using Safari with default settings, it behaved exactly as before, beginning the installation process with no password required.
"As PC virus experts know, this cat-and-mouse game can go on indefinitely. Your move, Apple."
Security Update 2011-003 included changes to the File Quarantine feature found in Mac OS X 10.6 Snow Leopard. It includes anti-malware definitions within the operating system itself, and examines external files downloaded within Mail, iChat, Safari, or other quarantine-aware applications.
The MACDefender malware first gained attention in early May, when it was spotted by an antivirus company. The program automatically downloads in Web browsers through JavaScript and originally required users to enter an administrator password, but a more recent variant does not ask for a password.
