Bengaluru,IT security and data protection firm, Sophos, discovered that Apple secretly updated the anti-malware protection built into Mac OS X when it released a new version earlier this week.

Although not documented by Apple, Mac OS X 10.6.4 has been updated to provide limited protection against OSX/Pinhead-B (called HellRTS by Apple), a backdoor Trojan which can allow remote hackers to gain control over Mac computers for the purposes of identity theft, spying and the distribution of spam.

Sophos has been detecting OSX/Pinhead-B since April, when the malware was distributed disguised as the popular iPhoto application by malicious hackers.

Its good that Apple has updated its Mac OS X malware protection, as this Trojan can give hackers the green light to send spam email from your computer, take screenshots of what you are doing, access your files and clipboard and much more, said Graham Cluley, Senior Technology Consultant at Sophos. But whats curious to me is why Apple didnt announce they were making this update in the release notes or security advisory that came with Mac OS X 10.6.4. Its almost as if they dont want to acknowledge that there could be a malware threat on Mac OS X.

Sophos researchers discovered that Apple updated a file called XProtect.plist - the rudimentary file that contains elementary signatures of a handful of Mac threats to detect HellRTS.

Its true to say that there are far fewer malware threats for Mac than there are for Windows but that doesnt mean the problem is non-existent. Unfortunately, many Mac users seem oblivious to security threats which can run on their computers, even though Apple has now built-in some elementary protection, continued Cluley. This lack of awareness isnt helped when Apple issues an anti-malware security update by stealth, rather than informing the public what it has done. You have to wonder whether marketing motives are at play behind such decisions.

Sophos experts warn that many Mac users have not bothered to install anti-virus software, meaning they could be a soft target for hackers in the future.

Notes to Editor

About Sophos

More than 100 million users in 150 countries rely on Sophos as the best protection against complex threats and data loss. Sophos is committed to providing security and data protection solutions that are simple to manage, deploy and use, and that deliver the industrys lowest TCO. Sophos offers award-winning encryption, endpoint security, web, email, and network access control solutions backed by SophosLabs-a global network of threat intelligence centers. With more than two decades of experience, Sophos is regarded as a leader in security and data protection by top analyst firms and has received many industry awards. Sophos is headquartered in Oxford, UK and Boston, US. More information is available at www.sophos.com