Apple updates malware definitions to address fake Flash player trojan

Apple's updated an entry in the anti-malware files of OS X to lock down a trojan that pretends to be a Flash player installer, but actually hijacks users' search results. The trojan is known as "OSX.QHost.WB.A," and claims to install Flash, but instead redirects Google results to an IP in the Netherlands, which then loads unwanted ads and offsite content along with the fake search results. When the malware was officially discovered, none of the ad servers actually worked, so the malware threat at this time is more of an inconvenience than anything.
Still, Apple apparently doesn't want to take chances -- it's updated the "XProtect.plist" file in OS X with the definition of the trojan. Since an update earlier this year, you don't even need to run Software Update to get this upgrade, as you likely get File Quarantine definitions upgraded daily already. But it's good to know that steps have been taken already to protect your Mac from this malware.
Share
Apple's updated an entry in the anti-malware files of OS X to lock down a trojan that pretends to be a Flash player installer, but...
Add a Comment
It seems tricking people into believing their Mac can have a virus is just as effective as infecting a Mac with a virus.
August 12 2011 at 9:44 PM Report abuse Permalink rate up rate down ReplyTo the user who gets tricked, yeah, but trojans are still severely limited by their inability to self-propagate.
August 13 2011 at 11:00 AM Report abuse Permalink rate up rate down ReplyDeals of the Day
more deals- Acoustic Research Digital Photo Frame with iPod Dock for $50 + free shipping
- Apple iPhone 4 8GB for Verizon, AT&T, or Sprint for $50 + pickup at Best Buy
- Unlocked iPhone 4S 16GB for GSM (AT&T, T-Mobile) for $619 + free shipping
- Apple iMac Core i7 Quad 3.4GHz 27" w/ 24GB RAM, 2TB HDD for $2,677 + $29 s&h
- Used Apple Magic Mouse for $36 + $4 s&h
- Skullcandy Riot Earbud Headphones for $10 + free shipping
2 Comments