Now, Esser’s bug has been seen in the wild for the first time. Researchers from Malwarebytes discovered a new adware installer doing the rounds, which allowed the adware to embed itself into the operating system, and – crucially – allowed the adware to install itself without requiring the user’s password.
Malwarebytes, which also criticises Esser for releasing the exploit without giving due notice to Apple, says: “This is obviously very bad news. Apple has evidently known about this issue for a while now … Unfortunately, Apple has not yet fixed this problem, and now it is beginning to bear fruit.”
Read MoreSelect your language