Few days ago we reported of an intelligent trojan, Yontoo, that masks itself as an essential application to get install on OSX devices, the Yontoo trojan once installed on a OSX device will pull out relevant ads and shows them on any website being browed from any browser. In a demo video it was showcased that it could showcase iMac selling ads right on Apple website in quite a stealth mode. It seemed as if the ads were integrated right into the website itself. They main aim of the trojan was to force its own ad platform and earn money from the clicks it generates. Apple just sent out an update to make the OSX systems immune from the Yontoo trojan and to remove the trojan from the devices it is already installed in.
The Yonyoo adware trojan was being detected by Intego’s VirusBarrier software since almost an year now but Apple did not patch it up right until the online media went gaga over it last week. Apple updated its XProtect.plist file with definitions that can detect and curb the Yontoo trojan. In testing, it appears that the detection is very specific to certain factors like location etc.