Apple Mac Defender, MacProtector, and MacSecurity Fake Anti-Virus Software

Apple has released a security advisory related to the recent Mac fake anti-virus software. The most common names for this fake anti-virus software are MacDefender, MacProtector, and MacSecurity. This fake anti-virus software is the result of a phishing scam targeting Mac users that redirects them from legitimate websites to fake websites. These fake websites notify the user that their computer is infected with a virus, and the user is tricked into installing the fake anti-virus software to solve the issue. The ultimate goal of the fake anti-virus software is to steal the user's credit card information.

US-CERT encourages users to perform the following preventative measures to help mitigate the risks:

• Review Apple article HT4650 for avoidance and mitigation strategies.
• Do not follow unsolicited web links or attachments in email messages.
• Review the Recognizing Fake Antivirus document for additional information regarding fake antivirus software.

Apple plans to deliver a security update to address the issue. US-CERT will provide additional details as they become available.