OFFICIAL SECURITY BLOG

We’ve moved! You can now read the latest and greatest on Mac adware and malware at Malwarebytes.

Apple finally adds Icefog to XProtect

Posted on October 9th, 2013 at 3:28 PM EDT

This morning at 7:52 AM EST, my computer downloaded an XProtect update. I’m told, by security researcher Ivan Sorokin, that this update adds Icefog to the XProtect definitions. And it must, since that’s the only Mac malware that has appeared in the last couple weeks. It’s not easy to tell, though, since Apple chose to call it something different than everyone else.
Read the rest of this entry »

20 Comments

New Mac malware discovered: Icefog

Posted on September 26th, 2013 at 1:53 PM EDT

Kaspersky Lab has released a 68-page report on cross-platform malware that has been active since 2011, and which they are calling Icefog. According to the report, this malware has been used in targeted espionage attacks in Asia, primarily in Japan and South Korea. It affects both Windows and Mac OS X, although the Mac version seems to be new, and installs a backdoor that communicates with a command & control server for instructions.
Read the rest of this entry »

9 Comments