Cyber security company F-Secure has acquired Little Flocker, the behavioral analysis-based monitoring app for Macs, developed by iPhone forensics expert and security researcher Jonathan Zdziarski, who joined Apple last month.

The Helsinki-based firm announced the news in a press release posted to its site, where it revealed that Little Flocker would be built into a new security product it's releasing, called XFENCE.

Little Flocker

Little Flocker protects Macs by using advanced behavioral based analysis, and monitors apps that attempt to access confidential files and system resources. It also detects and blocks Mac ransomware. F-Secure will build Little Flocker's next-generation security engine into its new XFENCE technology. XFENCE will complement F-Secure's existing endpoint solutions to provide advanced behavioral Mac protection for both corporate and consumer customers.

F-Secure said that the "myth" of Macs not requiring protection against ransomware, backdoors, and other software was fading away, due to "Apple's popularity among senior-level employees and other high-value targets". By acquiring Little Flocker, it said it hoped to further enhance its products' existing cyber security capabilities for the sophisticated detection of zero-day attacks.

For businesses, the core technology is to be combined with F-Secure’s security cloud and packaged into its Protection Service for Business, a security solution with centrally managed computer, mobile and server security with integrated patch management and mobile device management. Consumer customers can make use of the Flocker technology with F-Secure Safe, the company's multi-device security product.

Little Flocker developer Zdziarski announced in March that he was joining Apple's Security Engineering and Architecture team. Known as "NerveGas" within the jailbreaking community, Zdziarski had provided input on a number of important iOS-related security matters over the years, including Apple's high-profile battle with the FBI over unlocking an iPhone used by a shooter in the 2015 San Bernardino attack.

Top Rated Comments

arilev Avatar
113 months ago
I have this app. I'm amazed at what it picks up. For example, App Store wants to access my camera when it starts up, I'd like to know why!
The camera can be used to snap a photo of prepaid/gift card codes so that you don't have to enter a crazy long string of numbers manually. Lots of people pay for their App Store and iTunes purchases this way.
Score: 9 Votes (Like | Disagree)
thisisnotmyname Avatar
113 months ago
I was unaware of that, do you have any links that detail this?

Thanks
You should check out a site called Mac rumors, they covered it...

https://www.macrumors.com/2016/03/06/mac-ransomware-transmission/
Score: 6 Votes (Like | Disagree)
tuukkap Avatar
113 months ago
I like Zdziarski so I went to F-Secure and read about it. Sounds useful. Read up on their vpn-service Freedome as well. They offer a vpn-service to private persons and then they use technology to block protocols in their customers traffic. As a customer you will not know this unless your read their fine-print. And logging they do of course.

So from a Privacy-prespective F-Secure suck. I don't like them not being upfront with their vpn-service as well.

I'll scrutinise their EULA for XFence before I decide if it's interesting.
[doublepost=1491497352][/doublepost]

It's an honest question. Be nice :D
Hi, please read https://www.f-secure.com/en/web/legal/privacy/freedome-no-nav for more information about privacy with Freedome. Working at F-Secure, I can say that our company does care a LOT about privacy, and at least I do not consider us sucking so much in that sense :) We jump a few extra hoops to further anonymise the collected data.

Yes, you probably get even more privacy by using something like Tor, but Freedome is offering security as well. Related article here: https://www.opswat.com/blog/malware-spread-tor-exit-node
Without trying to advertise too much, there was also a university research recently (linked in the article), where Freedome was found to be amongst the better VPN clients for security: https://arstechnica.com/security/2017/01/majority-of-android-vpns-cant-be-trusted-to-make-users-more-secure/

Finally, Finland has pretty good privacy laws but like any country, the legislation still pose some requirements for providing these services.
[doublepost=1491810684][/doublepost]
I'm in the same boat. I'm guessing we early adopters get the shaft for supporting him at the beginning. As an Apple employee he pretty much has to wash his hands of the whole affair, and the new corporate overlords aren't going to give a **** about the few of us who knew about it before now.
Hello, one of the corporate overlords here, and giving a world about the few of you. No plans on shafting anyone ;) Instead we have been discussing about how to reach you early adopters to find a way for you to keep running and updating the product. Would love to hear from all of you and get valuable feedback in future too, so stay tuned.
Score: 3 Votes (Like | Disagree)
whothefvck Avatar
110 months ago
The long way to show hidden Mac OS X files is as follows:
[LIST=1]
* Open Terminal found in Finder > Applications > Utilities.
* In Terminal, paste the following: defaults write com.apple.finder AppleShowAllFiles YES.
* Press return.
* Hold the 'Option/alt' key, then right click on the Finder icon in the dock and click Relaunch.

Well, that is indeed the long way of achieving it.
Try pressing CMD + SHIFT + . (dot) in the Finder.app. It toggles hidden files. Quicker and easier.
Score: 3 Votes (Like | Disagree)
tuukkap Avatar
113 months ago
Great to hear. Your stock went way up for actually being engaged with the community. I follow Mikko on Twitter, which is how I found out about the acquisition.

Honestly I'm sure the number of Jonathan's paying customers is so small that it might not be worth the effort. But I do appreciate that you at least know we exist. I don't actually think you owe us anything. With Jonathan going to Apple, the product was effectively dead anyway due to their IP and PR policies. I'm just glad the functionality is finding a home where the polish and ease of use can continue to improve for non-bleeding edge users.
Thanks :)

We will be contacting all of you existing LF customers via email hopefully still this week, based on the customer list we were provided. More information in the email, but basically you will have access to F-Secure XFENCE so no worries.
[doublepost=1491990536][/doublepost]
I actually had a reply from Jonathan and he assured me that f-secure would honour existing LF licences, so perhaps if they are watching this forum they could let us know exactly what we need to do ? unless of course he gave them our contact info from the purchase details ...
No need to do anything yet, we have the contact list and as mentioned above, will contact you soon :)
Score: 2 Votes (Like | Disagree)
MrSkoTA Avatar
113 months ago
Indeed, Macs are not completely immune but so far we've had no ransomware out in the wild.
Um, Wut!?! To my knowledge there has been Mac Ransomeare. One of them was from downloading Transmission from the source!
Score: 2 Votes (Like | Disagree)

Popular Stories

iOS 26

15 New Things Your iPhone Can Do in iOS 26.2

Friday December 5, 2025 9:40 am PST by
Apple is about to release iOS 26.2, the second major point update for iPhones since iOS 26 was rolled out in September, and there are at least 15 notable changes and improvements worth checking out. We've rounded them up below. Apple is expected to roll out iOS 26.2 to compatible devices sometime between December 8 and December 16. When the update drops, you can check Apple's servers for the ...
Intel Inside iPhone Feature

Apple's Return to Intel Rumored to Extend to iPhone

Friday December 5, 2025 10:08 am PST by
Intel is expected to begin supplying some Mac and iPad chips in a few years, and the latest rumor claims the partnership might extend to the iPhone. In a research note with investment firm GF Securities this week, obtained by MacRumors, analyst Jeff Pu said he and his colleagues "now expect" Intel to reach a supply deal with Apple for at least some non-pro iPhone chips starting in 2028....
iPhone 14 Pro Dynamic Island

iPhone 18 Pro Leak Adds New Evidence for Under-Display Face ID

Monday December 8, 2025 4:54 am PST by
Apple is actively testing under-screen Face ID for next year's iPhone 18 Pro models using a special "spliced micro-transparent glass" window built into the display, claims a Chinese leaker. According to "Smart Pikachu," a Weibo account that has previously shared accurate supply-chain details on Chinese Android hardware, Apple is testing the special glass as a way to let the TrueDepth...
iOS 26

Apple Seeds Second iOS 26.2 Release Candidate to Developers and Public Beta Testers

Monday December 8, 2025 10:18 am PST by
Apple today seeded the second release candidate version of iOS 26.2 to developers and public beta testers, with the software coming one week after Apple seeded the first RC. The release candidate represents the final version iOS 26.2 that will be provided to the public if no further bugs are found. Registered developers and public beta testers can download the betas from the Settings app on...
iPhone 17 Pro Cosmic Orange

10 Reasons to Wait for Next Year's iPhone 18 Pro

Monday December 1, 2025 2:40 am PST by
Apple's iPhone development roadmap runs several years into the future and the company is continually working with suppliers on several successive iPhone models at the same time, which is why we often get rumored features months ahead of launch. The iPhone 18 series is no different, and we already have a good idea of what to expect for the iPhone 18 Pro and iPhone 18 Pro Max. One thing worth...
Johny Srouji

Apple's Chipmaking Chief Johny Srouji Responds to Report About Him Potentially Leaving

Monday December 8, 2025 9:23 am PST by
Apple's chipmaking chief Johny Srouji has reportedly indicated that he plans to continue working for the company for the foreseeable future. "I love my team, and I love my job at Apple, and I don't plan on leaving anytime soon," said Srouji, in a memo obtained by Bloomberg's Mark Gurman. Here is Srouji's full memo, as shared by Bloomberg:I know you've been reading all kind of rumors and...
Johny Srouji

Apple Chip Chief Johny Srouji Could Be Next to Go as Exodus Continues

Sunday December 7, 2025 10:41 am PST by
Apple's senior vice president of hardware technologies Johny Srouji could be the next leading executive to leave the company amid an alarming exodus of leading employees, Bloomberg's Mark Gurman reports. Srouji apparently recently told CEO Tim Cook that he is "seriously considering leaving" in the near future. He intends to join another company if he departs. Srouji leads Apple's chip design ...
top stories 2025 12 04a

Top Stories: iOS 26.2 Coming Soon, Apple Execs Depart, and More

Saturday December 6, 2025 6:00 am PST by
You'd expect things to be starting to wind down for the holidays by now, but that doesn't seem to be the case yet in the world of Apple news, with Apple just about ready to release iOS 26.2 and other operating system updates to the public. There was also a flurry of news this week about Apple executive departures, some expected and some not so expected, while we also learned that Apple and...
maxresdefault

iPhone Fold: Launch, Pricing, and What to Expect From Apple's Foldable

Monday December 1, 2025 3:00 am PST by
Apple is expected to launch a new foldable iPhone next year, based on multiple rumors and credible sources. The long-awaited device has been rumored for years now, but signs increasingly suggest that 2026 could indeed be the year that Apple releases its first foldable device. Subscribe to the MacRumors YouTube channel for more videos. Below, we've collated an updated set of key details that ...
Apple Fitness Plus expansion hero

Apple Fitness+ Coming to 28 New Regions With Digital Voice Dubbing

Monday December 8, 2025 6:19 am PST by
Apple today announced that Fitness+ is expanding to 28 new markets on December 15 in the service's largest international rollout since launch, accompanied by new language dubbing and a K-Pop music genre. Apple Fitness+ will become available in Chile, Hong Kong, India, the Netherlands, Singapore, Taiwan, and additional regions on December 15, with Japan scheduled to follow early next year....