Apple Responds Quickly to Evolving 'Mac Defender' Threat With Updated Malware Definitions - MacRumors
Skip to Content

Apple Responds Quickly to Evolving 'Mac Defender' Threat With Updated Malware Definitions

Yesterday, we noted that the attackers behind the "Mac Defender" malware had moved quickly to combat Apple's new security update, within hours releasing a new variant of the malware that was capable of skirting around Apple's new protection.

macdefender c xprotect

Xprotect.plist before (left) and after (right) latest update to address new Mac Defender variant

Fortunately for users, Apple has moved almost as quickly as the attackers, quashing any potential fears that the company might be slow to respond to each new threat that appears. As reported by Italian site Spider-Mac [Google translation], Apple has already issued an update to detect the new variant, pushing out a new entry for "OSX.MacDefender.C" to the Xprotect.plist file that contains the signatures for identifying malware.

After the update, users are indeed presented with a warning if they begin to download the latest variant:

macdefender mdinstall warning
As part of the security update earlier this week, Apple included a system to automatically update the Xprotect.plist anti-malware definitions every 24 hours, giving the company the ability to quickly push out new protection for Mac OS X Snow Leopard users. While this is unlikely to be the end of the Mac Defender attackers' efforts, it does appear that Apple is committed to responding and issuing updates to its users as quickly as the attackers can churn out new variants.

Popular Stories

M5 MacBook Pro

RIP, MacBook Ultra

Monday October 19, 2026 9:37 am PDT by
Apple today sent out invites for an experience in Los Angeles on Wednesday, October 28, and the "Pro and tell" tagline on the invitation likely means that the rumored MacBook models with touch-enabled OLED displays will stick with MacBook Pro branding instead of the once-rumored "MacBook Ultra" name. The long-rumored "iPhone Ultra" ended up being named iPhone Duo, so speculation that Apple...
iPhone Duo Trio

Here's What Apple's Apps Look Like on the iPhone Duo

Tuesday October 20, 2026 11:12 am PDT by
With just three days to go until the iPhone Duo is released, Apple is getting ready for the launch. Behind the scenes, the App Store now has screenshots of Apple's built-in apps running on the Duo. We've seen some apps in marketing materials, but images of the ones we haven't seen give us an idea of what it will be like using the iPhone Duo day to day. Many apps are shown in landscape...
iphone duo standby

Apple Retail Staff Told to Warn Against iPhone Duo Walk-In Purchases

Saturday October 17, 2026 2:30 pm PDT by
Some Apple retail employees have been told to warn customers against visiting to purchase an iPhone Duo without a pre-order on Friday, October 23. Apple Store employees told MacRumors that they have been advised that there will likely be no iPhone Duo stock available for walk-in purchases on launch day. Staff have been instructed to discourage customers without pre-orders from coming in...

Top Rated Comments

0815 Avatar
201 months ago
The writers of this malware love to see Apple jumping through the hoops they make. This will on,y get worse with 10.7, as per Apples history, new OSes are filled with bugs and exploitable flaws.

You mean like windows where the general advice it not to install it until SP1 is released?
Score: 18 Votes (Like | Disagree)
NebulaClash Avatar
201 months ago
The attackers will always be one step ahead...

But if Apple stays only one step behind and closes the holes within 24 hours each time, the attackers will soon learn that there isn't that much to be gained by the effort. They'll have to try another approach.

You know, this relatively benign malware is, on balance, a good thing. This will educate Mac users not to click OK on software they did not choose to install. So that when something really serious shows up, they will know better thanks to this mild version that is merely annoying.
Score: 17 Votes (Like | Disagree)
201 months ago
The writers of this malware love to see Apple jumping through the hoops they make. This will on,y get worse with 10.7, as per Apples history, new OSes are filled with bugs and exploitable flaws.

Completely irrelevant. MacDefender doesn't take advantage of any flaw or bug in OS X. The only flaw in play here is people's gullibility.
Score: 12 Votes (Like | Disagree)
0815 Avatar
201 months ago
I wouldn't be surprised if the entire thing weren't stage-managed by Apple to give them an argument in favour of a move to an iOS-style Mac App Store-only software model. (Jailbreak your Mac, anyone?)

Here we go again - people running out of real arguments against apple clinging to stupid claims like this ....
Score: 11 Votes (Like | Disagree)
201 months ago
You have to install this yourself.... it is NOT a virus... but maleware.

Not sure exactly how OSX is less secure? Maleware has been around for years for OSX.... just don't install the damn thing!

Maleware? What's maleware? Sounds like a line of men's lingerie. :confused:
Score: 11 Votes (Like | Disagree)
201 months ago
Huh?



This doesn't bode well for Lion's release. Even if these threats don't indicate a material problem with OS X, the fact that Apple has been baited into an arms war makes OS X look less secure.

What kind of logic is this?
Score: 11 Votes (Like | Disagree)
Latest Stories
Apple Music's New Look is Now Live on Apple's Website
Apple Music's New Look is Now Live on Apple's Website
24 minutes ago
Anthropic Launches Claude Duet, a Proactive AI Agent
Anthropic Launches Claude Duet, a Proactive AI Agent
55 minutes ago
What 32,000 Folds Did to the iPhone Duo's Hinge
What 32,000 Folds Did to the iPhone Duo's Hinge
2 hours ago
iPhone Duo's Hidden FaceTime Camera Takes 'Trash' Photos
iPhone Duo's Hidden FaceTime Camera Takes 'Trash' Photos
3 hours ago
iPhone Duo Has 'Edge Light' Feature That Debuted on Macs Last Year
iPhone Duo Has 'Edge Light' Feature That Debuted on Macs Last Year
4 hours ago
Apple Support App Updated for iPhone Duo's Larger Display
Apple Support App Updated for iPhone Duo's Larger Display
4 hours ago
Amazon Sweetens the Deal on Entry-Level 16-Inch MacBook Pro With $570 Off
Amazon Sweetens the Deal on Entry-Level 16-Inch MacBook Pro With $570 Off
4 hours ago
iPhone Duo Tips Over on MagSafe Stands When Unfolded
iPhone Duo Tips Over on MagSafe Stands When Unfolded
4 hours ago
Apple Music's New Look Officially Announced
Apple Music's New Look Officially Announced
6 hours ago
iPhone Duo Supports Apple Pencil Starting With iOS 27.2
iPhone Duo Supports Apple Pencil Starting With iOS 27.2
6 hours ago
iPhone Duo Accessories Roundup: Cases and Screen Protectors From OtterBox, ZAGG, and More
iPhone Duo Accessories Roundup: Cases and Screen Protectors From OtterBox, ZAGG, and More
7 hours ago
Apple Stores Will Have 'Limited' Availability of iPhone Duo for Walk-In Customers
Apple Stores Will Have 'Limited' Availability of iPhone Duo for Walk-In Customers
8 hours ago
iPhone Duo Reviews Explain Why Device is Both 'Fun' and 'Frustrating'
iPhone Duo Reviews Explain Why Device is Both 'Fun' and 'Frustrating'
8 hours ago
Apple Says 'Reachability' Feature Coming to iPhone Duo Later This Year
Apple Says 'Reachability' Feature Coming to iPhone Duo Later This Year
9 hours ago
Loop Capital Cuts Apple Rating Over iPhone Sales Outlook
Loop Capital Cuts Apple Rating Over iPhone Sales Outlook
13 hours ago
Apple Stores in Bordeaux and Lille Looted During French Protests
Apple Stores in Bordeaux and Lille Looted During French Protests
13 hours ago
Bluesound Adds Native Apple Music Support
Bluesound Adds Native Apple Music Support
14 hours ago
Apple CEO John Ternus Explains What Makes Good Product Design
Apple CEO John Ternus Explains What Makes Good Product Design
15 hours ago
UK Proposes New Ways to Help Apple Pay Rivals
UK Proposes New Ways to Help Apple Pay Rivals
17 hours ago
WhatsApp Developing In-App Browser for All Chat Links on iPhone
WhatsApp Developing In-App Browser for All Chat Links on iPhone
18 hours ago
Apple's App Store Chief Explains Its Push for Premium Games
Apple's App Store Chief Explains Its Push for Premium Games
18 hours ago
Apple Could Owe Even More After $5.7 Billion Patent Verdict
Apple Could Owe Even More After $5.7 Billion Patent Verdict
18 hours ago
Skyrim Comes to Apple Silicon Macs With New Unofficial Installer
Skyrim Comes to Apple Silicon Macs With New Unofficial Installer
19 hours ago
Apple Highlights Mac and iPad Use in Paris Design Exhibition
Apple Highlights Mac and iPad Use in Paris Design Exhibition
19 hours ago
Apple Seeks 6G Modem Engineers as It Plans for Post-5G iPhones
Apple Seeks 6G Modem Engineers as It Plans for Post-5G iPhones
22 hours ago
First iPhone Duo Unboxing Video Appears Ahead of Friday Launch
First iPhone Duo Unboxing Video Appears Ahead of Friday Launch
22 hours ago
Perplexity Computer Can Now Run Fully Locally on Mac
Perplexity Computer Can Now Run Fully Locally on Mac
23 hours ago
Apple's Touchscreen OLED MacBook Pro: Everything We Know
Apple's Touchscreen OLED MacBook Pro: Everything We Know
1 day ago
iPad Mini 8 Expected Next Week With These 10 New Features
iPad Mini 8 Expected Next Week With These 10 New Features
1 day ago
Here's What Apple's Apps Look Like on the iPhone Duo
Here's What Apple's Apps Look Like on the iPhone Duo
1 day ago