Criminals Tweek Mac Defender 'Scareware'

The criminals behind the Mac Defender "scareware" have released a new variant under a new name with a streamlined installation process that doesn't prompt victims for their password, according to Computerworld. This release was likely a response to Apple's recent acknowledgement of the threat posed by scareware. As we reported yesterday, Apple has promised an update for Mac OS X that will find and delete the fake anti-virus program known as Mac Defender.

This new variant, however, goes by the name MacGuard. The fake security program now consists of a small downloader, dubbed "avRunner," that downloads the phony MacGuard security software from a hacker-controlled site. Peter James, a spokesman for security firm Intego, which discovered Mac Defender, says this variant does not require an administrative password as it loads itself directly in the Applications folder of a victimized Mac. V3 co.uk reports that Intego considers MacGuard "medium risk."