{"id":32458,"date":"2014-10-07T10:23:27","date_gmt":"2014-10-07T17:23:27","guid":{"rendered":"http:\/\/www.intego.com\/mac-security-blog\/?p=32458"},"modified":"2026-07-01T04:11:32","modified_gmt":"2026-07-01T11:11:32","slug":"apple-updates-xprotect-malware-definitions-for-iworm-botnet","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/apple-updates-xprotect-malware-definitions-for-iworm-botnet\/","title":{"rendered":"Apple Updates XProtect Malware Definitions for iWorm Botnet"},"content":{"rendered":"

Apple has released an update to its XProtect.plist definitions file to provide Mac OS X with basic detection\u00a0for iWorm malware. This update detects three variants of OSX\/iWorm<\/a>, which Apple labelled OSX.iWorm.A, OSX.iWorm.B, and OSX.iWorm.C.<\/p>\n

\"XProtect<\/a><\/p>\n

Apple’s XProtect, or “safe downloads list” feature, has been a part of OS X since Snow Leopard; Intego explained back in 2009 what Snow Leopard’s anti-malware function<\/a> did and did not do to protect your Mac. Additionally, Apple uses the same feature to block out-of-date plug-ins for both Flash Player and Java, which are often targeted by hackers looking to exploit known vulnerabilities.<\/p>\n

The OSX\/iWorm malware\u00a0is a sophisticated botnet affecting Mac OS X computers and used a novel technique to operate (it used Reddit). Last week, Intego wrote about the new\u00a0iWorm botnet<\/a>\u00a0and what it does when installing on a Mac.<\/p>\n

Apple’s XProtect system provides rudimentary protection against certain Mac threats. It does not offer live malware scanning, protection against Windows threats or phishing sites, or other protection that full-featured anti-virus software can provide.<\/p>\n

While security updates from Apple are always welcome, it’s clear that Apple does not protect against every known threat and often doesn’t release updates in the most timely fashion. Days before Apple updated its definitions, Intego VirusBarrier <\/a>already began detecting this threat as OSX\/iWorm<\/strong>.<\/p>\n","protected":false},"excerpt":{"rendered":"

Apple has released an update to its XProtect.plist definitions file to provide Mac OS X with basic detection\u00a0for iWorm malware. This update detects three variants of OSX\/iWorm, which Apple labelled OSX.iWorm.A, OSX.iWorm.B, and OSX.iWorm.C. Apple’s XProtect, or “safe downloads list” feature, has been a part of OS X since Snow Leopard; Intego explained back in […]<\/p>\n","protected":false},"author":4,"featured_media":8761,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[3151,505,1492,80,1498,86,1516,1519,1522,1495,303],"class_list":["post-32458","post","type-post","status-publish","format-standard","has-post-thumbnail","category-security-news","tag-apple","tag-botnet","tag-iworm","tag-mac-os-x","tag-mac-backdoor-iworm","tag-mac-malware","tag-osx-iworm-a","tag-osx-iworm-b","tag-osx-iworm-c","tag-osxiworm","tag-xprotect"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t