Apple quietly updated OS X’s malware protection system in the recent OS 10.6.4 upgrade, but made no mention of it in the accompanying release notes or security bulletin.
The updated XProtect.plist now protects against HellRTS, a Trojan Horse often disguised as iPhoto that hijacks the host Mac to send spam, take screenshots, and peek at files and settings.
Security expert Graham Cluley slammed the company for stealth security updates.
Unfortunately, many Mac users seem oblivious to security threats which can run on their computers. And that isn’t helped when Apple issues an anti-malware security update like this by stealth, rather than informing the public what it has done. You have to wonder whether their keeping quiet about an anti-malware security update like this was for marketing reasons. “Shh! Don’t tell folks that we have to protect against malware on Mac OS X!”
