Today, Apple has pushed new updates to both XProtect and Malware Removal Tool, bringing the former to version number 2147; and the latter to version 1.79. Both updates are dated May 28, 2021.
The only change to XProtect is an expansion of rule MACOS.6eaea4b. This rule prevents variants of XCSSET malware via the malware hashes and was updated with a handful of additional hashes. The rule was initially introduced in April during the version 2144 update.
This is a continuation of Apple’s commitment to preventing XCSSET malware, which has been one of their primary focuses as the malware has quickly adapted and changed.
No additional data about the update to MRT is available at this time.
Jamf Protect is purpose-built to work with Apple’s native security tools, while also adding the capability of detecting and mitigating a wider range of known malware. Additionally, it provides alerting and reporting capabilities – including the identification of potential new threats — before new updates to XProtect and/or MRT may be available.
Would you like the alerting and reporting capabilities of Jamf Protect?