Biting the hand that feeds IT
Biting the hand that feeds IT
|
|
Original URL: http://www.theregister.co.uk/2008/03/12/mac_security_site_malware_infestation/
A Mac security site has a forum full of links to actual malware which targets Apple computers.
Discussion forum posts on Macvirus.org seek to trick users into downloading the RSPlug-Gen Trojan, a type of malware capable of infecting Apple Macs. For good measure, the site also harbours posts designed to dupe prospective marks into downloading the Zlobar-Fam Windows Trojan.
Both the Trojans pose as fake codecs that are supposedly needed to view non-existent pornographic movie clips featuring troubled chanteuse Britney Spears.
The site serving the fake codecs detects the user agent in a browser in order to distinguish between Mac and Windows PCs before delivering the appropriate malware, anti-spyware firm Sunbelt Software reports (http://sunbeltblog.blogspot.com/2008/03/oops-macvirusorg-hosting-porno-malware.html).
As well as posts pointing towards malware, the forum on Macvirus.org (which describes itself as a site dedicated to "keeping an eye on Mac viruses") is also littered with actual pornographic entries.
An investigation (http://www.sophos.com/security/blog/2008/03/1158.html) by security researchers at Sophos suggests that the nom de plume GxxxxBxxxxxx used in the malware touting posts on Macvirus.org has also been used to publish links to malware on other "badly managed" forums - including a UK City Council, a wedding website, and numerous online gaming sites - since the start of February.
In most cases, either the attempts failed or the offending posts have since been removed. ®
Rare Mac Trojan exploits Apple vuln (23 June 2008)
http://www.theregister.co.uk/2008/06/23/mac_trojan/
Apple mega update strikes out calendar bug (29 May 2008)
http://www.channelregister.co.uk/2008/05/29/apple_mega_update/
Researchers out Apple over unpatched iCal bugs (22 May 2008)
http://www.theregister.co.uk/2008/05/22/unpatched_apple_bug_flap/
Apple lags MS in security response (31 March 2008)
http://www.theregister.co.uk/2008/03/31/apple_security_response_pants/
Scareware package planted in ITV.com ads (21 February 2008)
http://www.theregister.co.uk/2008/02/21/itv_scareware_peril/
Malware authors target Mac emerging markets (25 January 2008)
http://www.theregister.co.uk/2008/01/25/mac_malware_menace/
Scareware scammers target Mac users (15 January 2008)
http://www.theregister.co.uk/2008/01/15/mac_scareware_scam/
Mac OS X firewall blocks Skype and online gamers (6 November 2007)
http://www.theregister.co.uk/2007/11/06/leopard_firewall_skype_problems/
Security site knocks spots off Mac OS X Leopard firewall (2 November 2007)
http://www.theregister.co.uk/2007/11/02/leopard_security_analysis/
Mac users get a new OS, and a Trojan for good measure (2 November 2007)
http://www.theregister.co.uk/2007/11/02/weekly_0211/
Macs seized by porn Trojan (31 October 2007)
http://www.theregister.co.uk/2007/10/31/in_the_wild_osx_trojan/
'Mac worm' hacker in death threat farce (19 July 2007)
http://www.theregister.co.uk/2007/07/19/mac_worm_farce/
© Copyright 2008
