I'd recommend visiting the support community over at http://openforum.sophos.com/macav as we're not able to provide tech support up here.

Cheers

What's new is that they are now doing it for DNS Changer malware.

You're right to say that they have been doing it for a small number of other security threats, with a somewhat different message. See our report from last year here: http://nakedsecurity.sophos.com/2011/07/21/google-malware-warning/

Sorry that you can't attend the conference (without a TARDIS or DeLorean), but you can still read what it's about... and - as you've correctly guessed - we do explain the connection at the end of the article for those who are temporally challenged.

When you do a remote lock or locate, the app sends a confirmation that the lock was successful or an SMS with the position (latitude/longitude) of your device.

So they do..
http://www.thesun.co.uk/sol/homepage/news/4328728/I-hacked-Justin-Biebers-emails-to-girlfriend-Selena-Gomez.html

Thanks for the info.

All is explained at
http://nakedsecurity.sophos.com/2010/11/12/free-mac-anti-virus-we-just-cant-win/

We've made the software available for free purely to raise our brand awareness. No strings attached.

Some folks have asked why the app requests rights to send SMS messages and access your contacts.

When you do a remote lock or locate, the app sends you an SMS with latitude/longitude or confirmation that the lock was successful,

Access to contacts is required because the user specifies from which other phone numbers they might wish to remotely lock/locate their missing Android. You can choose those numbers from your contacts

I'm just impressed that Apple managed to fix this vitally important issue so quickly, considering how long it took them to roll out the Java patch to Mac OS X users...

Apologies to those who are finding it hard to access the main Sophos website. Looks like it's a DNS issue, rather than something malicious. It's being investigated by our IT team

Thanks for the message Gavin.

I've written about Adobe's "paid-for" security fixes here http://nakedsecurity.sophos.com/2012/05/11/adobe-photoshop-security/