There's something new brewing in Mac malware development (again).
Recent analysis has revealed to us that Trojan-Downloader:OSX/Flashback.C disables the automatic updater component of XProtect, Apple's built-in OS X anti-malware application.
Mac Trojan Flashback.B Checks for VM
One of our analysts has discovered something interesting while debugging the latest version of Flashback, a Mac trojan that attempts to trick people into believing it's an Adobe Flash Player update.
While comparing the differences between Flashback.A and Flashback.B, he saw this routine:
Edited by Union_Thug, 23 October 2011 - 02:25 AM.