or Connect
AppleInsider › Forums › Software › Mac OS X › Apple updates XProtect.plist to block Yontoo
New Posts  All Forums:Forum Nav:

Apple updates XProtect.plist to block Yontoo

post #1 of 2
Thread Starter 
Shortly after news emerged of a new adware trojan targeting OS X web browsers, Apple has updated its malware and adware detections list to block Yontoo.

you want two


Intego's Mac Security Blog noted (via MacRumors) on Friday that Apple had updated its "XProtect" anti-malware system. XProtect.plist will now recognize Yontoo and warn users that attempt to install the software on their computers.

Intego's post notes that the XProtect detection "is very specific and potentially location-dependent." The extra specificity, Intego supposes, may be there in order to stop only indirect installations of the file.

News of the Yontoo trojan emerged recently when a Russian anti-virus company pointed out its existence. Yontoo asks users if they want to install a browser plugin, media player, download accelerator, or other video-oriented program. Upon agreeing to the download, the plugin begins transmitting browsing data to an off-site server. User browsing data is processed, and the server sends back a file embedding third-party code into webpages visited by the user. The viewing or clicking of embedded ads then generates ad affiliate network profits for the criminals behind the adware.
post #2 of 2

Let it not be said that Apple doesn't reply to such exploits mercilessly.

Originally Posted by Slurpy

There's just a TINY chance that Apple will also be able to figure out payments. Oh wait, they did already… …and you’re already fucked.

 

Reply

Originally Posted by Slurpy

There's just a TINY chance that Apple will also be able to figure out payments. Oh wait, they did already… …and you’re already fucked.

 

Reply
New Posts  All Forums:Forum Nav:
  Return Home
  Back to Forum: Mac OS X
AppleInsider › Forums › Software › Mac OS X › Apple updates XProtect.plist to block Yontoo