Apple Bonjour & iTunes

17th October 2019

Bonjour aka ZeroConf aka Avahi is a service installed by iTunes, which has recently been used to proliferate malware in some manufacturing companies.

Update iTunes. BEWARE; if iTunes is uninstalled Bonjour is NOT. So admins will need to scour their workstations for lingering copies of Bonjour.

It is possible to listen for Bounjour announcements but this will be complicated by the fact that many network Printers come with Bonjour installed and turned on by default. Remember that Bonjour announcements are per subnet, so if you have multiple subnets you will need to run it on each.