Apple has distributed malware through its AppStore, again.
The official response from Apple was to wait quite a bit –– in effect so that more user data could be stolen. Then the reaction was to
Update: Apple removed most of the TrendMicro apps including the fake developer account they had to promote the Open Any Files, which was reported as malware by @thomasareed from @Malwarebytes . Kudos to @Apple for fast action.
I just got wind of that now and checked our Macs. Some had some of those PUPAs installed. They were still active –– but indeed no longer available from the store.
In case you missed the sarcasm in the first quote here:
Looking at my analog calendar it tells me we have September by now.
The safest place to download apps for your Mac is the Mac App Store. Apple reviews each app before it’s accepted by the store, and if there’s ever a problem with an app, Apple can quickly remove it from the store.
Well, "safest" except when it's not.
And the above Apple quote only means that new 'infections' will not occur, once Apple does take action.
How does anyone respond to that in terms of actions to take? For now and in this case it's 'just delete the App, hmhm'.
But for that
you already have to know
that something fishy is going on behind the scenes.
It seems Apple does not communicate anything about this.
Therefore the question is:
How do you get notified for these kind of AppStore infringements?
The Apple mailing list for security announcements is silent on that issue.
PG-13: Shit happens, we all know that. But how to clean it up and keep it from happening again –– more important: how to respond –– either at all or much more quickly to it?
Where do we have to watch for news on this to catch some smaller malware incidents? Not just those big fish that make big news because some very few Apps made the top lists of the AppStore?