DIY crimekit brings advanced malware to Mac OSX
Next stop: iPad and Linux users
Regcast training : Hyper-V 3.0, VM high availability and disaster recovery
A crimeware kit discovered over the weekend promises to bring a flood of advanced malware that steals passwords and other sensitive data from computers running Mac OS X.
The kit is being advertised as the Weyland-Yutani Bot in underground crime websites, where it's being sold for $1,000. The first ever crimeware kit for the Mac comes with the ability to grab data entered into Firefox, with the Chrome and Safari browsers soon to follow, according to Danish IT firm CSIS Security Group. The makers of the new DIY malware kit claim they are close to releasing versions that will work on iPads and Linux machines as well.
Software compatibility has long been a key selling point in legitimate markets, and it's no different in criminal circles. Weyland-Yutani uses web injection templates that are identical to those offered by the ZeuS and Spyeye crimeware kits available for targeting Windows computers. The forms seamlessly inject fraudulent fields into legitimate websites that are intended to trick him into entering social security numbers or other sensitive information. When the user types the data into the field, it is transmitted back to the malware author.
“CSIS finds this crimekit to be quite disturbing news since MacOS previously to some degree has been spared from the increasing amount of malware which has haunted Windows-based systems for years,” the firm's Peter Kruse wrote in a blog post published on Monday.
The bulletin was published the same day that Mac antivirus provider Intego warned of a new piece of Mac malware called Mac Defender that fraudulently posed as legitimate security software for OS X. Besides making false claims that a target's Mac is infected, it causes browsers to open up pages from hard core porn sites, giving the impression that the machine is under someone else's control
So-called rogue antivirus software has been using similar techniques to menace Windows users for years.
KrebsOnSecurity has a video here that shows Weyland-Yutani in action. ®
COMMENTS
Social Engineering Never works....
..I mean, just look at Facebook, a beacon of light of users not clicking on any old shit.
Explain to me...
...just how you expect the average Mac user to be properly educated.
Most of them want to know as little as possible about computers, which is why (in their eyes) they chose to buy a Mac in the first place.
Eh?
Apparently there's a lot of mac users out there who are sensible enough not to install random programs.
I have not met any of these, could someone please point me at them?
Joking aside, I'd say that the ratio of tech-savvy users to, er, the type of person who will click on any banner ad is about the same among my windows using and OSX using friends/family. so I'd expect this crime kit to be about as effective on apple users as it is on windows.
IT infrastructure monitoring strategies
Agentless Backup is Not a Myth
Top 10 SIEM implementer’s checklist
Steps to Take Before Choosing a Business Continuity Partner
Requirements Checklist for Choosing a Cloud Backup and Recovery Service Provider
