Friday, January 23, 2009

OS X pirates usher trojan onto their computers

If you've recently downloaded iWork 09 illegally using BitTorrent, your Mac probably has a trojan.

According to Intego (a company focused on Mac security), a new Mac trojan is circulating within the illegal copies of iWork 09 floating around on BitTorrent trackers. The trojan, OSX.Trojan.iServices.A, hides within an extra install package included with the iWork image, called iWorkServices.pkg. If you install this illicit version of iWorks, the secret package quietly infects your Mac with the trojan, which has full root privileges. Once installed, the trojan connects back to its author, providing him a backdoor onto your computer. This allows the attacker to continue installing more malware onto your system, and could even potentially allow him to add your computer to a botnet.

In the PC world, it's standard practice for attackers to hide malware within pirated software. However, OS X users probably aren't used to this sort of technique. You better start getting used to it! In my opinion, this is just one more sign that Mac's aren't as bulletproof against security threats as some Apple users would like to think (and I say this as a proud Macbook Pro owner). Malware authors have noticed Apple's growing popularity, and they will continue to try and exploit it. It's time for Apple users to face reality, and become security aware.

So what should you do in this case? Simple! Don't download and install these kinds of illegal, pirated Apple applications. Stay with the legal stuff and this threat won't affect you. If you do succumb to the dark side, beware what you might get.

1 comments:

Corey Nachreiner said...

According to reports today, researchers have already discovered this Mac trojan in other pirated Mac software as well. Apparently, pirated versions of Photoshop CS4 for Mac may contain this trojan.

By the way, if you're a Mac user looking for cool security apps, I recommend Little Snitch. It's an application aware, client-based Mac firewall. If you get infected with a trojan like this one, Little Snitch could prevent the trojan from reaching it's command & control server, while also cluing you into the fact that you may have malware on your systems.