Posted by: David Harley | May 21, 2011

MacRapture, MacDefender, AppleUncare

I know you’ve all dying to hear my thoughts on the MacDefender (aka a few other things) fake AV, and possibly wondering why Mac Virus hasn’t commented on that or anything else recently.

Well, I’ve been travelling: Infosec UK, a connectionless week in Devon, Prague for the AMTSO and CARO workshops, and finally a few days in Krems for the EICAR conference. So while I’ve maintained some presence in the blogosphere, I’ve focused on the blogs that are considered part of the services I provide to the AV industry, of which this isn’t one.

And Old Mac was last heard of travelling in the South Seas, so he’s probably already on his way to a celestial street party, if he hasn’t been swallowed by an earthquake in Tonga.

However, I have given one or two journalists the benefit of my prejudices: 

And, of course, I’ve been tracking articles relating to the issue. In no particular order:

  1. A quality blog, as ever, from Chet Wisniewski, with links to other Sophos blogs on the topic: Or you could simply do an archive search on, for example.
  2. Allegedly, an internal Apple document instructing Applecare operatives to stay hands-off:;content. Also,
  3. Summary by The H:
  4. Uninstall Guides from for MacProtector ( and MacDefender (
  5. John Gruber lists a whole load of commentary suggesting a possible tipping point, but dismisses it as crying Wolf: Also cites et al by way of an alternative view from Apple support.
  6. Contrary opinion from Adrian Kingsley-Hughes and Ed Bott
  7. Sound commentary, as ever, from Intego on this and other Mac malware at, but this item strikes me as being particularly constructive:

Plus a few items not necessarily related, but interesting anyway:

I’m saying nothing about that last one. For now…

Small Blue-Green World


  1. Welcome Back David! 🙂

  2. 🙂

  3. Welcome back David! Nice collection of helpful links.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.


%d bloggers like this: