January 4, 2010, 2:49PM

Apple Malware Blocker Left For Dead?

Nearly six months after Apple added a malware blocker to Mac OS X (Snow Leopard), the feature appears to be collecting cobwebs.

Apple has not added any anti-malware signature updates to the XProtect.plist file that launched with antidotes for OSX.RSPlug.A and OSX.Iservice, two known Trojan horse programs targeting Mac OS X users.
To be fair, the two signatures flag numerous variants of each Trojan but it’s disappointing that Apple has not seen it fit to expand the signature base to catch the growing list of DNS-Changer threats that specifically target the Mac operating system.

DNS-Changer Trojans are used to change the Mac’s DNS server, a trick used by phishers to load fake Web pages and hijack valuable user data.  They are typically distributed via social engineering tricks or within pirated software on peer-to-peer sites.

With the anti-malware function in Snow Leopard, Mac users were expecting new definitions via the Software Update utility but nothing new has been released in months.

The anti-malware blocker is useful, but somewhat rudimentary.  It only scans files downloaded with a handful of applications (Safari, Mail, iChat, Firefox, Entourage, and a few other Web browsers).

Shorten URL: http://threatpost.com/en_us/3bC. Click to copy to clipboard or post to Twitter

Comments

Your almost treating it like it's AVG or ClamWin and in fact it's never meant to be anything like that (Apples never advertised it's that), see http://twitter.com/jfroy/status/3542412555

mac suck

This article the work of the author's health. I have always followed this style of writing was sequel. I already saw the <a href="http://www.youtubeask.com" title="youtube">youtube</a> video site video about it. also a member of a group I am in the <a href="http://www.facebook-sohbet.com" title="facebook">facebook</a> site. I would like to specify that descriptive See this article informed me more.

Thank you to the article author.

This article the work of the author's health. I have always followed this style of writing was sequel. I already saw the <a href="http://www.youtubeask.com" title="youtube">youtube</a> video site video about it. also a member of a group I am in the <a href="http://www.youtube61.com" title="izlesene">izlesene</a> site. I would like to specify that descriptive See this article informed me more.

Thank you to the article author.

Post new comment

The content of this field is kept private and will not be shown publicly.
CAPTCHA
Please enter the two words below to help prevent spam.
Incorrect please try again
Enter the words above: Enter the numbers you hear:

 

Copyright © 2010 threatpost.com | Terms of Service | Privacy