Check out the Dell Store on CNET
September 1, 2009 11:50 AM PDT
Mac Malware Update: Unauthorized downloads of Snow Leopard infested with Trojans
Several Web sites have sprung up over the last couple days offering users free upgrades of Apple's latest operating system,
Mac OS X 10.6 Snow Leopard. Of course, these sites are socially engineered ploys to trick users into downloading malicious software.
Much like the iWork '09 and Adobe CS4 infected install packages we reported on in the spring, these Snow Leopard download sites are enticing users to get a free copy of the popular software, only to add a malicious version of a DNS Changer Trojan to their Mac.
TrendMicro Let us know! Twitter! More from Late-Breakers
Much like the iWork '09 and Adobe CS4 infected install packages we reported on in the spring, these Snow Leopard download sites are enticing users to get a free copy of the popular software, only to add a malicious version of a DNS Changer Trojan to their Mac.
TrendMicro has reported the threat on their blog:
Once executed, OSX_JAHLAV.K decrypts codes, which include a script that downloads other malicious scripts. The said script then alters the DNS configuration and includes two additional IP addresses in its DNS server. Users are thus possibly redirected to phishing sites and other fraudulent sites. In fact, some of these bogus sites are reportedly hosting FAKEAV (rogue antivirus) variants and components.Users are advised to only obtain copies of Mac OS X 10.6 Snow Leopard from Apple directly, or other trusted retailers.
Experiencing problems? Have feedback? Let us know!
You can now follow MacFixIt on Twitter!
Joe is a seasoned Mac veteran with years of experience on the platform. He reports on Macs, iPods, iPhones and anything else Apple sells. Before joining CNET, he even worked in Apple's retail stores. He's also a creative professional who knows how to use a Mac to get the job done.
Boo!
-
by PSmith
October 27, 2009 11:50 AM PDT
- Frankly, I'm surprised it took this long for the "bad guys" to start loading malware into pirated Mac software. Since the Mac OS is not vulnerable to "drive-by" viral infections and other weaknesses of the Windows platform, social engineering like this is the simplest way to infect a Mac.
-
Like this
Reply to this comment
-
(7 Comments)