• On GameSpot: So-called 'Halo killer' gets 23 to life
advertisement
February 17, 2006 9:15 AM PST

OSX/Inqtana.A worm affects older versions of Mac OS X 10.4.x (Tiger) -- not found in wild

by CNET staff
  • Font size
  • Print
  • 2 comments

F-Secure reports on the discovery of OSX/Inqtana.A -- a Java based proof of concept bluetooth worm that affects older versions of Mac OS X 10.4.x (Tiger). The vulnerability does not affect Mac OS X 10.4.5, and has not been found in the wild. As such, F-Secure admits that "it is unlikely that this variant would be a threat to Mac Users."

The F-Secure report states:

"Inqtana.A arrives to victim system as OBEX Push request, requiring user to accept the data transfer. When the transfer is done Inqtana.A uses directory traversal exploit to copy it's files so that it starts automatically on next reboot.

"On reboot the Inqtana.A will activate and look for devices that accept OBEX Push transfers and try to send itself to those devices.

"When Inqtana.A replicates over bluetooth it tries to send three files to any device it finds over bluetooth that supports OBEX push."

Feedback? Late-breakers@macfixit.com.

Resources

  • report
  • Late-breakers@macfixit.com
  • More from Late-Breakers
  • Recent posts from MacFixIt
    Apple releases Aperture 3.0
    Manage iCal's automatic e-mail generation for invitations
    CNET TV Apple Byte: Apple faces critics
    Weekly Utilities Update: Net Monitor, MiniUsage, TimeMachineEditor, more...
    Odds and Ends: Essential video codec packs for OS X
    Address Book: Unable to add, view contacts
    Persistent 'Faster Browser Search' overtaking Safari's default search
    Quick tip: Faster Time Machine backups
    Add a Comment (Log in or register)
    by vze26wyc_dotmac February 20, 2006 11:58 AM PST
    Protection not needed for mac's ? Today the routine scan by Norton 10x found
    two of the same infected file and quarantined them. I use 10.4.5 on a G-5
    what was found is this- 1518771144-2593876682 I have know idea what these
    are but norton says they are "infected files"
    Reply to this comment
    by berlin73 February 20, 2006 11:44 PM PST
    I just bought a brand new Imac 17 inch with duel core intel and all the bells
    and wistles. I also bought Norton Antivirus which detected inqtana(A) in three
    different places. I have the newest OSX 10.4.5

    What gives? Is my cell phone giving my Imac the virus? I tured off blue tooth
    from my preferences and will only open when connecting to my cell...??
    Clueless how I've had this computer for less than a week and I already have a
    virus. Is it possible that Norton Antivirus invented this just to sell/hype the
    need for their product? Are Macs at that great of risk. I am running Mac office
    2004 which I purchased with this computer. Does that make me more at risk
    because I'm using windows related programs?
    Reply to this comment
    advertisement

    About MacFixIt

    MacFixIt is CNET's troubleshooting resource for all things Mac. The information here helps you navigate the ins-and-outs of Mac ownership with how-tos, troubleshooting information, news, reviews, and more.

    Add this feed to your online news reader