{"id":2687,"date":"2011-05-06T17:05:03","date_gmt":"2011-05-07T00:05:03","guid":{"rendered":"http:\/\/blog.intego.com\/?p=2687"},"modified":"2020-02-05T11:44:43","modified_gmt":"2020-02-05T19:44:43","slug":"macdefender-macsecurity-malware-gets-a-bit-more-sophisticated","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/macdefender-macsecurity-malware-gets-a-bit-more-sophisticated\/","title":{"rendered":"MacDefender\/MacSecurity malware gets a bit more sophisticated"},"content":{"rendered":"

The people behind the MacDefender\/Mac Security malware fake antivirus that we reported here<\/a> and here<\/a>, have gotten a bit more sophisticated. In our security memo of May 2, 2011, we reported that while the application served was sophisticated, the web page used to deliver it showed a bogus Windows environment.<\/p>\n

Well, this fake antivirus is now served to Mac users from a page that resembles the Mac OS X Finder, albeit imperfectly. As you can see in the screenshot below, the fonts in the list aren’t correct, and the alert window isn’t a real Mac alert, but the sidebar is a copy of the Mac OS X Finder; there’s even a Dropbox folder. Also, the malware in the list are real Mac malware names.<\/p>\n

\"\"<\/a><\/p>\n

Mac users will no longer be put off by seeing the fake Windows screen, and this may incite more of them to install the fake antivirus. If you see such a window, close it, and don’t install any software you find in your Downloads folder or on your Desktop. The latest version of this fake antivirus is delivered in a file called anti-malware.zip, and the application is still called MacSecurity.<\/p>\n

\n

Download 30-day free trial<\/a><\/p>\n

Protect your Mac from malware<\/a><\/h4>\n

Download a free 30-day trial version of VirusBarrier X6 and save $5<\/a><\/p>\n

<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

The MacSecurity fake antivirus is now served from a page resembling the Mac OS X Finder. Mac users beware.<\/p>\n","protected":false},"author":3,"featured_media":8763,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[190],"tags":[54,2689,2695,2692,86],"yoast_head":"\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n\t\n\n\n\t\n\t\n\t\n