Condition Remains GREEN

Apple has released update Apple-SA-2011-05-31-1 Security Update 2011-003 to address MacDefender.

• File Quarantine now has a definition for OSX.MacDefender.A and OSX.MacDefender.B
• File Quarantine will check daily for updates to File Quarantine malware definition list in System Preferences>Security>General.
• Malware removal will search out various forms of MacDefender during the update process and remove them.
• It will indicate to the user that the Fake AV was found and removed.
• Malware removal will only occur during install, it is not a anti-virus solution. 

Condition Remains GREEN

RESPONSE, our Command and Control and Information Clearing House Center to handle all aspects of our on going MacDefender/MacProtector/MacSecurity and MacGuard response will remain accessible. We will be issuing a report shortly related to the MacDefender fakeAV security event. 

RESPONSE Includes the following

• Background.
• How to Remove.
• How to Protect.
• All information we know that we share publicly.

Condition Continues to be GREEN since we still consider this rouge Anti-Virus LOW RISK. However since the base of users that are reporting issues has increased we activate RESPONSE, our single clearing house related to specific MacSecurity event.