Condition Remains BLUE

RESPONSE center is still active related to MacDefender Malware but the conditions have stabilized. We will be conducting a post mortem of the event and determine what was effective and areas in need of improvement.

Areas we plan to explore:

• Better use of the Caro virus naming scheme to handle various and Mac Applications Packages.
• Quicker reporting and browser level responses including use of Safari extensions.
• Explore MAAS alert levels and determine if the levels need to include impact in addition to threat and Risk. In MacDefender's case the impact on users was far greater then the threat and risk.