Notes

Apple Updates Xprotect Malware Definitions To Shut Down 'iWorm Mac Botnet

Apple this weekend changed its XProtect blacklisting system for malware on OS X to address the recent iWorm attack that allegedly infected more than 18,000 Macs. As noted by MacRumors and Business Insider, a change to the XProtect.plist file released on October 4 contained definitions to protect users from three variants of the iWorm malware, which includes OSX.iWorm.A, OSX.iWorm.B, and OSX.iWorm.C.



Security researchers at Russian antivirus company Dr Web discovered that the iWorm malware was affecting OS X computers. It also formed a botnet using the Reddit server list. Server Tracker Although it is not specific how the malware spread, a report from The Safe Mac suggests that the malware was distributed with pirated Mac software downloaded from The Pirate Bay.



In addition to Apple's anti-malware measures, Reddit also shut down an untrue Minecraft subreddit and banned the account responsible for posting the iWorm botnet server list on the subreddit's forums. Without these posts, IWorm-controlled Macs are unable to connect to the botnet servers that are used by hackers to transmit instructions to the affected machines.


Homepage: https://servertracker.org/