OSX/MacDefender is a series of Fake Antivirus malware programs that tricked users into installing the program with fake online AV scans served via search engine optimization (SEO) poisoning [1]. Once installed it redirected users to adult websites and was capable of stealing credit card information [1]. Originally detected on 2 May, 2011 by Intego, Apple updated the XProtect signature with Security Update 2011-003 on 31, May 2011. This patch also included a feature to check for new XProtect signatures daily [2].
5337602d8c57f61a72414b27f60e2fd88b36bed264702068179154cfac57e49e |