OSX/Inqtana.A worm affects older versions of Mac OS X 10.4.x (Tiger) -- not found in wild
F-Secure reports on the discovery of OSX/Inqtana.A -- a Java based proof of concept bluetooth worm that affects older versions of Mac OS X 10.4.x (Tiger). The vulnerability does not affect Mac OS X 10.4.5, and has not been found in the wild. As such, F-Secure admits that "it is unlikely that this variant would be a threat to Mac Users."
The F-Secure report states:
"Inqtana.A arrives to victim system as OBEX Push request, requiring user to accept the data transfer. When the transfer is done Inqtana.A uses directory traversal exploit to copy it's files so that it starts automatically on next reboot.
"On reboot the Inqtana.A will activate and look for devices that accept OBEX Push transfers and try to send itself to those devices.
"When Inqtana.A replicates over bluetooth it tries to send three files to any device it finds over bluetooth that supports OBEX push."
Feedback? Late-breakers@macfixit.com.
Resources
two of the same infected file and quarantined them. I use 10.4.5 on a G-5
what was found is this- 1518771144-2593876682 I have know idea what these
are but norton says they are "infected files"
and wistles. I also bought Norton Antivirus which detected inqtana(A) in three
different places. I have the newest OSX 10.4.5
What gives? Is my cell phone giving my Imac the virus? I tured off blue tooth
from my preferences and will only open when connecting to my cell...??
Clueless how I've had this computer for less than a week and I already have a
virus. Is it possible that Norton Antivirus invented this just to sell/hype the
need for their product? Are Macs at that great of risk. I am running Mac office
2004 which I purchased with this computer. Does that make me more at risk
because I'm using windows related programs?