{"id":2687,"date":"2011-05-06T17:05:03","date_gmt":"2011-05-07T00:05:03","guid":{"rendered":"http:\/\/blog.intego.com\/?p=2687"},"modified":"2026-07-01T13:45:16","modified_gmt":"2026-07-01T20:45:16","slug":"macdefender-macsecurity-malware-gets-a-bit-more-sophisticated","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/macdefender-macsecurity-malware-gets-a-bit-more-sophisticated\/","title":{"rendered":"MacDefender\/MacSecurity malware gets a bit more sophisticated"},"content":{"rendered":"

The people behind the MacDefender\/Mac Security malware fake antivirus that we reported here<\/a> and here<\/a>, have gotten a bit more sophisticated. In our security memo of May 2, 2011, we reported that while the application served was sophisticated, the web page used to deliver it showed a bogus Windows environment.<\/p>\n

Well, this fake antivirus is now served to Mac users from a page that resembles the Mac OS X Finder, albeit imperfectly. As you can see in the screenshot below, the fonts in the list aren’t correct, and the alert window isn’t a real Mac alert, but the sidebar is a copy of the Mac OS X Finder; there’s even a Dropbox folder. Also, the malware in the list are real Mac malware names.<\/p>\n

\"\"<\/a><\/p>\n

Mac users will no longer be put off by seeing the fake Windows screen, and this may incite more of them to install the fake antivirus. If you see such a window, close it, and don’t install any software you find in your Downloads folder or on your Desktop. The latest version of this fake antivirus is delivered in a file called anti-malware.zip, and the application is still called MacSecurity.<\/p>\n

\n

Protect your Mac from malware<\/h4>\n

Download a free 30-day trial version of VirusBarrier X6 and save $5<\/p>\n

<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

The MacSecurity fake antivirus is now served from a page resembling the Mac OS X Finder. Mac users beware.<\/p>\n","protected":false},"author":3,"featured_media":8763,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[190],"tags":[54,2689,2695,2692,86],"class_list":["post-2687","post","type-post","status-publish","format-standard","has-post-thumbnail","category-malware","tag-fake-antivirus","tag-macdefender","tag-macprotector","tag-macsecurity","tag-mac-malware"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t