If you've recently downloaded iWork 09 illegally using BitTorrent, your Mac probably has a trojan.
According to Intego (a company focused on Mac security), a new Mac trojan is circulating within the illegal copies of iWork 09 floating around on BitTorrent trackers. The trojan, OSX.Trojan.iServices.A, hides within an extra install package included with the iWork image, called iWorkServices.pkg. If you install this illicit version of iWorks, the secret package quietly infects your Mac with the trojan, which has full root privileges. Once installed, the trojan connects back to its author, providing him a backdoor onto your computer. This allows the attacker to continue installing more malware onto your system, and could even potentially allow him to add your computer to a botnet.
In the PC world, it's standard practice for attackers to hide malware within pirated software. However, OS X users probably aren't used to this sort of technique. You better start getting used to it! In my opinion, this is just one more sign that Mac's aren't as bulletproof against security threats as some Apple users would like to think (and I say this as a proud Macbook Pro owner). Malware authors have noticed Apple's growing popularity, and they will continue to try and exploit it. It's time for Apple users to face reality, and become security aware.
So what should you do in this case? Simple! Don't download and install these kinds of illegal, pirated Apple applications. Stay with the legal stuff and this threat won't affect you. If you do succumb to the dark side, beware what you might get.
Friday, January 23, 2009
OS X pirates usher trojan onto their computers
Subscribe to:
Post Comments (Atom)
Corey Nachreiner, CISSP and Senior Network Security Analyst, is a computer security geek! He has ten years professional experience in the security industry, but first started exploring hacking when BBSs were still popular. When not uncovering the next big network threat, Corey tinkers with high tech gadgets, plays video games, and enjoys family life.
Scott Pinzon, CISSP and Information Security Analyst, has nearly 20 years of experience explaining high-tech products for clients both large (Weyerhaeuser IT) and small (Seattle's first cash machine network). He is the host of the network security podcast,
1 comments:
According to reports today, researchers have already discovered this Mac trojan in other pirated Mac software as well. Apparently, pirated versions of Photoshop CS4 for Mac may contain this trojan.
By the way, if you're a Mac user looking for cool security apps, I recommend Little Snitch. It's an application aware, client-based Mac firewall. If you get infected with a trojan like this one, Little Snitch could prevent the trojan from reaching it's command & control server, while also cluing you into the fact that you may have malware on your systems.
Post a Comment