OS X Trojan
Security Vendor Intego, which just so happens to also make Virus Removal software for the Mac, has posted a Security Alert today regarding a new Trojan for OS X injected into the installer of iWorks ‘09 floating around on Torrent Sites.
Recent discoveries have been “proof of concept” attempts, without any seeable malicious intent - but this bad boy is different.
It connects to a remote server over the Internet, and is able to remotely download additional “payloads” to your machine. Currently infected machines have downloaded new code, and are being used to carry out DOS (denial of service) attacks on websites.
To see if you are infected, run the following code in Terminal:
- (open Terminal.app)
- sudo su (enter password)
- rm -r /System/Library/StartupItems/iWorkServices
- rm /private/tmp/.iWorkServices
- rm /usr/bin/iWorkServices
- rm -r /Library/Receipts/iWorkServices.pkg
- killall -9 iWorkServices
Think about this before you install Mac software from Torrent sites. You’ll NEVER know what’s being installed when you enter your Admin Password. If you stick to Legal software (and probably star away from various *cough* *cough* dubious movie sites) you should be fairly safe.
Tags: Mac Announcements, Mac News
0 Responses to “OS X Trojan in iWorks ‘09 Torrent”
Please Wait
Leave a Reply
You must login to post a comment.