Trojan/Virus for Mac OSX Out in the Wild

Message Bookmarked
Bookmark Removed
Figured I'd share the news that a (basically harmless) Trojan designed for Mac OSX has appeared in the wilds of the internet. Take heed, citizens.

Lengthy explanation here.

Jessie the Monster (scarymonsterrr), Friday, 17 February 2006 01:01 (nineteen years ago)

-- This should probably be classified as a Trojan, not a virus, because it doesn't self-propagate externally (though it could arguably be called a very non-virulent virus)

-- It does not exploit any security holes; rather it uses "social engineering" to get the user to launch it on their system

-- If you're not running as an admin user, it will silently fail to infect most applications

-- It doesn't actually do anything other than attempt to propagate itself via iChat

-- It has a bug in the code that prevents it from working as intended, which has the side-effect of preventing infected applications from launching

-- It's not particularly sophisticated

I'm not exactly shaking in my boots here.

Paunchy Stratego (kenan), Friday, 17 February 2006 01:14 (nineteen years ago)

I am. But, then again I have epilepsy.

Japanese Cartoon Watcher, Friday, 17 February 2006 01:57 (nineteen years ago)

This must be a good thread for a new Mac user to ask what kind of virus protection software he should have. Well?

Mitya (mitya), Friday, 17 February 2006 03:36 (nineteen years ago)

I've never used any.

Erick Dampier is better than Shaq (miloaukerman), Friday, 17 February 2006 03:41 (nineteen years ago)

It would be like having furniture prevention software.

pixel farmer (Rock Hardy), Friday, 17 February 2006 03:48 (nineteen years ago)

Smug gits ;P

I'd just like to point out that with a firewall and minimal/no virus updating I've avoided virii for pretty much my whole PC life. Its just a matter of damn common sense, what programs you use and how you configure and use them. People who randomly click links, open attachments, surf shitty porn or warez pages or use Outlook, are asking for it really.

Trayce (trayce), Friday, 17 February 2006 04:06 (nineteen years ago)

yeah but Trace one of the supposed bennies of being a Mac user is never having to worry about that stuff

jay blanchard (jay blanchard), Friday, 17 February 2006 04:30 (nineteen years ago)

Yeah, I can surf all the scheisse porn I want without fear.

Erick Dampier is better than Shaq (miloaukerman), Friday, 17 February 2006 04:32 (nineteen years ago)

oh, wow, Googling scheisse porn led me to a wiki page that says there's a Russian porn adaptation of Master and Margarita.

Erick Dampier is better than Shaq (miloaukerman), Friday, 17 February 2006 04:34 (nineteen years ago)

Yeah fair point ver kids.

Trayce (trayce), Friday, 17 February 2006 04:52 (nineteen years ago)

or use Outlook

or internet explorer! or install plugins to view porn....

also:



In the English language, the standard plural of virus is viruses. This is the most frequently occurring form of the plural, both when referring to a biological virus and when referring to a computer virus.

The less frequent variations viri and virii are virtually unknown in edited prose, and no major dictionary recognizes them as alternative forms. Their occurrence can be variously attributed to hypercorrection formed by analogy to Latin plurals such as radii; idiosyncratic use as jargon among a group, such as computer hackers; the incorrect assumption that the word is of Greek origin, requiring an -i plural; and deliberate word play, such as on BBSs (see, e.g.: leet).

A BOLD QUAHOG (ex machina), Friday, 17 February 2006 04:53 (nineteen years ago)

Someone hates fun.

Casuistry (Chris P), Friday, 17 February 2006 08:26 (nineteen years ago)

I've never got a virus from Outlook or IE, or anything else for that matter. Antivirus software + firewall + anti-spyware seems to work fine for me.

I know I'm not supposed to use those programs but I'm too lazy to find alternatives when those work fine. I tried Mozilla once but it was SLLOOOOOOOWWW. That was on my old PC though, probably works fine on our current one.

Colonel Poo (Colonel Poo), Friday, 17 February 2006 10:23 (nineteen years ago)

This is about the equivalent of me coming round to your house and saying, "you know what would be neat? If you opened a terminal, typed sudo rm -rf / and entered your password!" in level-of-virus terms. In other words, it's all very overblown—but it makes some good headlines I guess.

tissp! (the impossible shortest specia), Friday, 17 February 2006 11:08 (nineteen years ago)

I'm certain some moron will use this exercise as an excuse to point out that Mac security = Win security.

Loose Translation, Friday, 17 February 2006 16:27 (nineteen years ago)

I love that if i click yes to a single browser dialog in IE I can ruin my machine.

A BOLD QUAHOG (ex machina), Friday, 17 February 2006 16:34 (nineteen years ago)

yeah but Trace one of the supposed bennies of being a Mac user is never having to worry about that stuff

er, only insofar as "why would anyone write a virus for the mac given that its user base is so small?" it seems a truism that, if/as market share increases, there'll be more people trying to write malware etc. the fact we're not all rife with it suggests that, y'know, OS X is pretty secure.

it seems this trojan claims to be a JPEG ... which then asks you for yr password when you double-click on it! now, come on. you'd have to be pretty damn dense not to realise something was up. TBH, i'd hope anyone stupid enough to fall for that wouldn't have an admin password anyway ;)

grimly fiendish (grimlord), Friday, 17 February 2006 16:38 (nineteen years ago)

basically, the point i'm trying to make is simple (sorry, i'm exhausted and not explaining myself well): we still don't need to worry about "that stuff", unless we are a knobber with 0 branes.

grimly fiendish (grimlord), Friday, 17 February 2006 16:39 (nineteen years ago)

Well it only makes sense that a stupid lame virus would appear finally for the Mac, their market share is picking up and might pick up a little further with the new gen. So why not? Though still not really worth any decent fucker's time to actually write a virus for 5% of the computing public, really, so this story seriously doesn't seem like anything other than charming, quaint, cute?

xpost

Allyzay Rofflesberger (allyzay), Friday, 17 February 2006 16:40 (nineteen years ago)

Extremely critical Mac OS X zero-day exploit released

Alba (Alba), Thursday, 23 February 2006 09:33 (nineteen years ago)

yeah, that's a hole in the exploit patch they released over a year ago. i think it still needs you to have the stoopid open "safe" files option ticked (see http://www.macosxhints.com/article.php?story=20060222071126871)

Britain's Obtusest Shepherd (Alan), Thursday, 23 February 2006 12:27 (nineteen years ago)

hey, where did my comment go? i posted - or thought i did - [trembles] after alba's one ;)

grimly fiendish (grimlord), Thursday, 23 February 2006 12:29 (nineteen years ago)

one year passes...

http://www.regdeveloper.co.uk/2008/01/16/mac_malware_concern/

the register always runs this boilerplate every time somebody comes out with some lame trojan that targets macs. eh

El Tomboto, Thursday, 17 January 2008 00:55 (eighteen years ago)

one month passes...

http://www.f-secure.com/weblog/archives/00001388.html

ok lol

El Tomboto, Friday, 29 February 2008 03:57 (seventeen years ago)

I called Apple and spoke with a couple of their reps. ... The reps were incredulous about the existence of malware specifically targeting Macs. They looked up articles about it while we were on the phone — they wouldn't believe me until they looked it up for themselves.

El Tomboto, Friday, 29 February 2008 03:57 (seventeen years ago)


You must be logged in to post. Please either login here, or if you are not registered, you may register here.