Just to keep the scorecard up to date: <G> Even though we all know that
most pirated software contains some added benefits.. So I guess we might
have some Mac bots out there also..
Rich
http://blogs.pcmag.com/securitywatch/2009/01/mac_malware_found_in_pirated_i.php
ZDNet's Ryan Naraine is reporting that pirated copies of Apple's
iWork 09 circulating on BitTorrent and elsewhere are infected with Mac malware.
According to Mac AV vendor Intego the malware is known as
OSX.Trojan.iServices.A. The pirated software is complete and
functional but the installer has an additional package, named
iWorkServices, that contains the attack. It may ask the user for an
administrator password, depending on the version of OS X. After it
installs it phones home to a remote server to report that it is
installed and awaits remote commands, including the installation of
additional software. It loads at boot time and has root access.
Sounds very much like a conventional Windows bot. Naraine quotes
Intego as saying that at least 20,000 Macs had already downloaded the
infected installer.
*************************************************************************
** List info, subscription management, list rules, archives, privacy **
** policy, calmness, a member map, and more at http://www.cguys.org/ **
*************************************************************************
