Apple has posted a Knowledge Base article that addresses the recent MacDefender malware issue and also reveals they will be addressing it in the next few days through a software update
In the coming days, Apple will deliver a Mac OS X software update that will automatically find and remove Mac Defender malware and its known variants. The update will also help protect users by providing an explicit warning if they download this malware.
Apple describes "MacDefender" as a recent phishing scam that has targeted Mac users by redirecting them from legitimate websites to fake websites which tell them that their computer is infected with a virus. The user is then offered Mac Defender "anti-virus" software to solve the issue.
Apple also offers instructions and tips for avoiding installation of the malware and how to remove the malware. Apple had previously been criticized for not allowing their support staff from addressing the issue in retail stores.
Top Rated Comments
Easy there killer, there are posters here that still think Apple invented the zipper ;)
It is really more of a scam that requires the active duping and input of the user. Although it does qualify as malware...
Don't get me wrong. It IS possible for Macs to get viruses. But this isn't one.
You can't be serious.
Nope, MS releases updates that search for and remove common malware (it's called the malicious software removal tool).
The simple fact is that the biggest security weakness in any modern OS is the organic bit sat in front of the keyboard: Users do stupid things!
On windows, people are well aware of the perceived risks and most average users run AV software (it's difficult to buy a PC nowadays that doesn't come with it bundled and on Vista and Windows 7 you get nagged to death if you don't have it installed). This might not catch zero day exploits but the AV vendors catch up pretty quick and any malware is caught and removed early if the user is stupid enough to click through a security warning on a dodgy software install.
However, on OS X, the average user is sat there thinking: Everyone knows Mac's can't get viruses so I'm perfectly safe doing anything I want on the internet (they don't care about the differences between malware, viruses, trojans, worms, etc: to them, anything that does bad things to their computer is a virus).
Now when they get the "enter an administrator username and password" prompt, they probably don't even pause for thought as they are perfectly happy with their false sense of security
The harsh reality is that no computer is immune from malware that's willingly installed by the user and good security practice is as important on OS X as Windows: Don't have "run safe files after download" set in safari, and never, ever, give a program your admin credentials unless you know exactly where it came from.