Apple keeps gatekeeper and another process up to date, effectively scanning for this kind of stuff is built into the OS.