VT, KnockKnock and OS X security

Here’s a quick follow-up to my earlier post for ITSecurity on OS X malware: I hear you KnockKnocking but you can’t come in (also mentioned on this site here).

VirusTotal reports that Patrick Wardle has incorporated data from the site into KnockKnock, a program intended to flag possible malware generically (by checking for unexpectedly persistent apps). The exact nature of the data isn’t described. VT also mentions tools it has made available to help with OS X security: tools to further characterize Mac OS X executables, and VirusTotal Uploader for OS X.

I haven’t checked these tools out, and can’t comment at present on their efficacy.

David Harley