Apple Responds Quickly to Evolving 'Mac Defender' Threat With Updated Malware Definitions - MacRumorsOpen MenuShow RoundupsShow Forums menuVisit ForumsOpen Sidebar
Skip to Content

Apple Responds Quickly to Evolving 'Mac Defender' Threat With Updated Malware Definitions

Yesterday, we noted that the attackers behind the "Mac Defender" malware had moved quickly to combat Apple's new security update, within hours releasing a new variant of the malware that was capable of skirting around Apple's new protection.

macdefender c xprotect

Xprotect.plist before (left) and after (right) latest update to address new Mac Defender variant

Fortunately for users, Apple has moved almost as quickly as the attackers, quashing any potential fears that the company might be slow to respond to each new threat that appears. As reported by Italian site Spider-Mac [Google translation], Apple has already issued an update to detect the new variant, pushing out a new entry for "OSX.MacDefender.C" to the Xprotect.plist file that contains the signatures for identifying malware.

After the update, users are indeed presented with a warning if they begin to download the latest variant:

macdefender mdinstall warning
As part of the security update earlier this week, Apple included a system to automatically update the Xprotect.plist anti-malware definitions every 24 hours, giving the company the ability to quickly push out new protection for Mac OS X Snow Leopard users. While this is unlikely to be the end of the Mac Defender attackers' efforts, it does appear that Apple is committed to responding and issuing updates to its users as quickly as the attackers can churn out new variants.

Popular Stories

apple pro tell logo

Apple Launching Five New Products Tomorrow

Thursday November 5, 2026 12:59 am PST by
Apple is releasing five new products this Friday, November 6, following pre-orders that opened last week, including its first touchscreen MacBook Pro models. The following new products will be available from tomorrow: iPad mini with OLED display and A20 Pro chip iMac with M6 chip 14-inch MacBook Pro with M6 chip 14-inch MacBook Pro with OLED touchscreen 16-inch MacBook Pro with OLED...
Apple Store Logo

Apple Store in UK Permanently Closing Later This Month

Tuesday November 3, 2026 7:34 am PST by
Apple today announced that its Festival Place store in Basingstoke, England will be permanently closing on Saturday, November 21. Apple Festival Place Apple had already announced that the store would be closing in November, but it had not provided the public with a specific date until now. Apple's store inside the Festival Place shopping center opened in 2011, so it had a 15-year run....
iPhone 18 Pro Burgundy Feature

MKBHD Switches Back to iPhone 18 Pro After Testing iPhone Duo

Tuesday November 3, 2026 5:10 am PST by
YouTuber Marques Brownlee has switched back to the iPhone 18 Pro after spending more than two weeks with the iPhone Duo. On the latest episode of the "Waveform" podcast, Brownlee said he missed the Pro's cameras and Face ID. He added that he would miss opening the iPhone Duo, using it in portrait, and reading on the larger screen. Despite strong initial demand for Apple's first foldable...

Top Rated Comments

0815 Avatar
201 months ago
The writers of this malware love to see Apple jumping through the hoops they make. This will on,y get worse with 10.7, as per Apples history, new OSes are filled with bugs and exploitable flaws.

You mean like windows where the general advice it not to install it until SP1 is released?
Score: 18 Votes (Like | Disagree)
NebulaClash Avatar
201 months ago
The attackers will always be one step ahead...

But if Apple stays only one step behind and closes the holes within 24 hours each time, the attackers will soon learn that there isn't that much to be gained by the effort. They'll have to try another approach.

You know, this relatively benign malware is, on balance, a good thing. This will educate Mac users not to click OK on software they did not choose to install. So that when something really serious shows up, they will know better thanks to this mild version that is merely annoying.
Score: 17 Votes (Like | Disagree)
201 months ago
The writers of this malware love to see Apple jumping through the hoops they make. This will on,y get worse with 10.7, as per Apples history, new OSes are filled with bugs and exploitable flaws.

Completely irrelevant. MacDefender doesn't take advantage of any flaw or bug in OS X. The only flaw in play here is people's gullibility.
Score: 12 Votes (Like | Disagree)
0815 Avatar
201 months ago
I wouldn't be surprised if the entire thing weren't stage-managed by Apple to give them an argument in favour of a move to an iOS-style Mac App Store-only software model. (Jailbreak your Mac, anyone?)

Here we go again - people running out of real arguments against apple clinging to stupid claims like this ....
Score: 11 Votes (Like | Disagree)
201 months ago
You have to install this yourself.... it is NOT a virus... but maleware.

Not sure exactly how OSX is less secure? Maleware has been around for years for OSX.... just don't install the damn thing!

Maleware? What's maleware? Sounds like a line of men's lingerie. :confused:
Score: 11 Votes (Like | Disagree)
201 months ago
Huh?



This doesn't bode well for Lion's release. Even if these threats don't indicate a material problem with OS X, the fact that Apple has been baited into an arms war makes OS X look less secure.

What kind of logic is this?
Score: 11 Votes (Like | Disagree)
Latest Stories
Apple's First Touchscreen Mac is Now Arriving to Customers
Apple's First Touchscreen Mac is Now Arriving to Customers
48 minutes ago
Claude Gets Personal Finance Feature With Bank Account Linking
Claude Gets Personal Finance Feature With Bank Account Linking
1 hour ago
Apple Arcade Adds Crossy Road Rush and NBA 2K27
Apple Arcade Adds Crossy Road Rush and NBA 2K27
2 hours ago
Apple's New HomeView Smart Home Hub: Here's How Much RAM It Has
Apple's New HomeView Smart Home Hub: Here's How Much RAM It Has
2 hours ago
iPad Mini vs. iPad Air Buyer's Guide: Now Just $50 Apart
iPad Mini vs. iPad Air Buyer's Guide: Now Just $50 Apart
3 hours ago
First iOS 27.3 and macOS Golden Gate 27.3 Public Betas Now Available
First iOS 27.3 and macOS Golden Gate 27.3 Public Betas Now Available
5 hours ago
Apple Announces a New Mac Sales Record
Apple Announces a New Mac Sales Record
6 hours ago
Paid $200 for Logic Pro? Apple Says You Won't Get This New Feature
Paid $200 for Logic Pro? Apple Says You Won't Get This New Feature
6 hours ago
Instagram's Edits Video Editor is Now Available on Mac
Instagram's Edits Video Editor is Now Available on Mac
6 hours ago
Prevent Siri and Search From Accessing Specific iPhone Apps
Prevent Siri and Search From Accessing Specific iPhone Apps
7 hours ago
Best Early Black Friday Deals on iPhone 18 Pro and iPhone Duo
Best Early Black Friday Deals on iPhone 18 Pro and iPhone Duo
8 hours ago
MacBook Pro PROLED XDR Reviews Are In: Is the Touchscreen Worth It?
MacBook Pro PROLED XDR Reviews Are In: Is the Touchscreen Worth It?
8 hours ago
Early Black Friday Accessory Deals at Amazon Include TVs, Headphones, and Charging Devices
Early Black Friday Accessory Deals at Amazon Include TVs, Headphones, and Charging Devices
9 hours ago
Apple Creator Studio App Updates Rolling Out, Starting With Logic Pro
Apple Creator Studio App Updates Rolling Out, Starting With Logic Pro
9 hours ago
Siri AI Waitlist Now Limited to Times of 'High Demand,' Says Apple
Siri AI Waitlist Now Limited to Times of 'High Demand,' Says Apple
11 hours ago
See Apple's Touchscreen MacBook Pro in Action
See Apple's Touchscreen MacBook Pro in Action
11 hours ago
MacBook Neo Shipments Expected to Double in 2027
MacBook Neo Shipments Expected to Double in 2027
12 hours ago
HomeView Code Suggests Future Support for AI Chatbot Apps, Anti-Spoofing Protection
HomeView Code Suggests Future Support for AI Chatbot Apps, Anti-Spoofing Protection
12 hours ago
Got an iPhone Duo on Launch Day? Tomorrow Could Be Your Last Chance to Return It
Got an iPhone Duo on Launch Day? Tomorrow Could Be Your Last Chance to Return It
13 hours ago
Apple Launching Five New Products Tomorrow
Apple Launching Five New Products Tomorrow
15 hours ago
Apple Releases Safari Technology Preview 256 With Bug Fixes and Performance Improvements
Apple Releases Safari Technology Preview 256 With Bug Fixes and Performance Improvements
1 day ago
Apps Can Now Try to Stop You From Canceling Subscriptions
Apps Can Now Try to Stop You From Canceling Subscriptions
1 day ago
'Super Mario Odyssey' Can Now Run on Apple TV Thanks to AI
'Super Mario Odyssey' Can Now Run on Apple TV Thanks to AI
1 day ago
How 'Resident Evil' Director Zach Cregger Uses His iPhone to Make Movies
How 'Resident Evil' Director Zach Cregger Uses His iPhone to Make Movies
1 day ago
HomePod Mini 2's Amount of RAM Confirmed
HomePod Mini 2's Amount of RAM Confirmed
1 day ago
Apple TV's '12 Days of Snoopy' Special Arrives November 13
Apple TV's '12 Days of Snoopy' Special Arrives November 13
1 day ago
Apple is Putting Employees on an AI Budget
Apple is Putting Employees on an AI Budget
1 day ago
Apple Releases Xcode 27.3 Beta With Three New Features
Apple Releases Xcode 27.3 Beta With Three New Features
1 day ago
Apple Will Check Public iCloud Links for Harmful Content Starting in iOS 27.3
Apple Will Check Public iCloud Links for Harmful Content Starting in iOS 27.3
1 day ago
macOS 27.3 Brings Live Activities to Macs Without Dynamic Island
macOS 27.3 Brings Live Activities to Macs Without Dynamic Island
1 day ago

🔗 Related Apple News & Rumors

Stay updated with the latest Apple ecosystem news and verified rumors