Apple plans to release a OS X software update that will seek out and destroy the MacDefender malware or scareware, Apple said in a support notice late on Tuesday.
"In the coming days, apple will deliver a Mac OS X software update that will automatically find and remove MacDefender malware and its known variants," Apple wrote. The update will also help protect users by providing an explicit warning if they download this malware."
Security firm Intego reported that the application attaches itself to a computer's launch menu and has no dock icon, making it difficult to quit. Mac Defender also opens Web pages for pornographic Web sites in the user's Web browser every few minutes, the firm said. "This is most likely to make users think that they are infected by a virus, and that paying for MAC Defender will relieve them of the problem," it said.
The professional-looking download is reportedly popping up on Google image searchers, according to Mac users who have been targeted.
"When a user clicks on a link after performing a search on a search engine such as Google, this takes them to a Web site whose page contains JavaScript that automatically downloads a file. In this case, the file downloaded is a compressed ZIP archive, which, if a specific option in a Web browser is checked ("open safe files" after downloading in Safari, for example), will open," the Intego blog stated.
Apple recommends quitting Safari if a notification pops up about any malware. Apple then recommends that users enter the Downloads folder and delete the installer, if it has shown up. If the user has already installed the malware, Apple has provided a more sophisticated multi-step removal process. "Do not provide your credit-card information under any circumstances," Apple said.