The bad guys who write the variants on this malware are good. Very good. It changes constantly. It gets harder to clean each time.
With the ecosystem of the Mac pretty much demanding that the only real remedy is the “restore” I wonder what will happen once most of the malware damages restore so it won’t work properly? People will be REALLY happy then. :) Guess what, just like Windows, but without the decades of experience making cleanup tools.
Some of these boys are good enough - and professional “AV” people, working at av companies.
We know this. And have delivered the proof (sources, bins and proof-of-origin) to the police. So far, no reaction.
No, you are wrong. The Mac ecosystem does not rely on the restore but on time machine. Much easier. This was NOT malware. Just a JAVE script trick. Easy to get out of and does not even require time machine, or anything but relaunching Safari. There was no "damage" and no malware can damage them system software on a Mac. It does not operate with the permissions like a Windows machine that allow that to happen.