<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Malware Land on Melomac</title>
    <link>https://melomac.com/categories/malware-land/</link>
    <description>Recent content in Malware Land on Melomac</description>
    <generator>Hugo</generator>
    <language>en-us</language>
    <copyright>Melomac &amp;copy; 2026</copyright>
    <lastBuildDate>Thu, 12 Mar 2026 20:13:36 +0100</lastBuildDate>
    <atom:link href="https://melomac.com/categories/malware-land/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>XProtect behavioral flop</title>
      <link>https://melomac.com/posts/xprotect-behavioral-flop/</link>
      <pubDate>Wed, 04 Feb 2026 00:00:00 +0000</pubDate>
      <guid>https://melomac.com/posts/xprotect-behavioral-flop/</guid>
      <description>&lt;p&gt;On reading the latest Security Advisories for macOS, a few friends noticed I recently went through a career change:&lt;/p&gt;&#xA;&lt;blockquote&gt;&#xA;&lt;p&gt;&lt;strong&gt;Sandbox&lt;/strong&gt;&lt;br&gt;&#xA;We would like to acknowledge Arnaud Abbati for their assistance.&lt;/p&gt;&#xA;&lt;/blockquote&gt;&#xA;&lt;p&gt;And, for once I can share what I do, I am certainly not going to miss the opportunity!&lt;/p&gt;&#xA;&lt;h2 id=&#34;threat-or-thread&#34;&gt;Threat or Thread&lt;a href=&#34;#threat-or-thread&#34; aria-hidden=&#34;true&#34; tabindex=&#34;-1&#34;&gt;&lt;/a&gt;&lt;/h2&gt;&lt;p&gt;As far as I remember, I always kept an eye wide open on live threats to monitor their evolutions. Once I&amp;rsquo;d figure out the delivery method, I&amp;rsquo;d automate the downloading of new variants and receive notifications about notable changes.&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
