Feeds

'Mac worm' hacker in death threat farce

Much ado about malware

High performance access to file storage

Claims by an anonymous author that he was paid to create a worm targeting Mac OS X systems are turning into a soap opera-style farce. Infosec Sellout said his 'Rape-OSX' worm uses an undisclosed vulnerability in the mDNSResponder component of Mac OS X to spread.

Low-threat malware targeting Mac OS X systems is unusual, but far from unprecedented. Claims that the supposed author of the worm is being paid to create proof-of-concept malware lack credibility or rationale, aside from creating mischief.

The original 15 July post on Infosec Sellout's blog, which has since been stripped of detail, said: "I wrote this for my own purposes and it will be demonstrated to those who asked me to engage in this work. Yes, I am being compensated for this (Hi, Joanna)."

The information security community is a small, almost exclusively male clique. The only Joanna of note is Joanna Rutkowska, founder of Invisible Things Lab, a noted security researcher who developed the Blue Pill rootkit to illustrate the security shortcoming of Windows Vista's anti-malware defences.

Rutkowska told eWeek that she doesn't know Infosec Sellout and certainly hasn't paid anybody to write worms.

Infosec Sellout was "identified" as LMH, someone associated with the Phrack High Council (PHC), on Cutaway Security's blog on 17 July, based on an anonymous chat-room conversation. PHC aims to cause grief to responsible white-hat hackers.

Whether this is true or not remains unclear, but soon after this Infosec Sellout's blog was "hacked", renamed "Security Information", and stripped of almost all its posts. One of the two posts left on the blog provides a link to information on the alleged worm, but none of them detail of the original post.

IDG reports that death threats were posted on the blog prior to the hack, adding further spice to an already heady mix.

Rape-OSX is looking more and more a work of mischief rather than mayhem. Perhaps we should thank Infosec Sellout for enlivening an otherwise dull week in information security with his gonzo-style pranks? ®

High performance access to file storage

More from The Register

next story
Obama allows NSA to exploit 0-days: report
If the spooks say they need it, they get it
Parent gabfest Mumsnet hit by SSL bug: My heart bleeds, grins hacker
Natter-board tells middle-class Britain to purée its passwords
Web data BLEEDOUT: Users to feel the pain as Heartbleed bug revealed
Vendors and ISPs have work to do updating firmware - if it's possible to fix this
OpenSSL Heartbleed: Bloody nose for open-source bleeding hearts
Bloke behind the cockup says not enough people are helping crucial crypto project
One year on: diplomatic fail as Chinese APT gangs get back to work
Mandiant says past 12 months shows Beijing won't call off its hackers
Call of Duty 'fragged using OpenSSL's Heartbleed exploit'
So it begins ... or maybe not, says one analyst
Experian subsidiary faces MEGA-PROBE for 'selling consumer data to fraudster'
US attorneys general roll up sleeves, snap on gloves
Oz bank in comedy Heartbleed blog FAIL
Bank: 'We are now safely patched.' Customers: 'You were using OpenSSL?'
prev story

Whitepapers

Mainstay ROI - Does application security pay?
In this whitepaper learn how you and your enterprise might benefit from better software security.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Mobile application security study
Download this report to see the alarming realities regarding the sheer number of applications vulnerable to attack, as well as the most common and easily addressable vulnerability errors.