

Unlike XProtect, which relies on signatures for detection and can only alert the user when it detects known malware, MRT consists of executable code capable of automatically removing malware and performing other forms of remediation. Prior to May this year, Apple listed its Malware Removal Tool, MRT, as another of the key components in the defence against malware. Apple last updated those detection signatures in version 2161 on 30 June 2022.Īpple continues to describe XProtect as a key component in two of the three layers of defences against malware, and has augmented its use in macOS. This is based on signature recognition, using data updated once or twice each month to keep pace with changing malware threats. This article tries to explain where your Mac now stands.Īlthough one of XProtect’s original purposes was to block the use of old and vulnerable versions of third-party software such as Java and Adobe’s Flash, more recently it has mainly scanned executable code to detect known malware. Although Apple has made no announcement of any change in anti-malware tools in macOS, they’re clearly on the change.

This year they have been joined by a third, XProtect.app or XProtect Remediator, and Apple has dropped all references to MRT in its Platform Security Guide. Recent versions of macOS have come with two tools designed to detect malware and deal with it, by ‘remediation’: XProtect and MRT.
