Apple has released a new update to XProtect, its built-in malware protection tool, for all macOS versions.
This update bumps XProtect to version 5351 (from 5347) — the first broad release since early June — and adds fresh detection rules for several threats, including the Boatload stealer family and new osascript-based malware.
As usual, Apple provides no public details on the specific threats addressed. All users should check that the update has installed.
This version adds six new Yara rules for MACOS.ANGRYORB.OX, MACOS.BOATLOAD.STCRST, MACOS.BOATLOAD.PRIN, MACOS.BOATLOAD.PEME, MACOS.VSHELL.DITA and MACOS.VSHELL.DR, amends rules for MACOS.MISOMAGIC.PA, and tidies spacing for those for MACOS.SOMA.STTX. From the rules for Boatload, that would appear to be a stealer.
Osascript rules in XPScripts.yr gain no less than 14 new rules, and amend those for MACOS.OSASCRIPT.TIPA, MACOS.OSASCRIPT.SYPR, MACOS.OSASCRIPT.TADE and MACOS.OSASCRIPT.REOB.
You can check whether this update has been installed by opening System Information via About This Mac, and selecting the Installations item under Software.
MacDailyNews Note: More info via the full article here.
Please help support MacDailyNews — and enjoy subscriber-only articles, comments, chat, and more — by subscribing to our Substack: macdailynews.substack.com. Thank you!
Support MacDailyNews at no extra cost to you by using this link to shop at Amazon.
