Apple's First Trojan Horse

Apple is crowing about how its iTunes App Store is about to hit its one billionth download today, but it has also quietly reached another milestone earlier this year: its first Trojan horse program.

Until recently, the big target always was Microsoft Windows, and Apple computers were protected by "relative obscurity," [Kevin Haley, a director of security response at Symantec] said.

But blogs are buzzing this week about what two Symantec researchers have called the first harmful computer program to strike specifically at Mac.

This Trojan horse program, dubbed the "iBotnet," has infected only a few thousand Mac machines, but it represents a step in the evolution of malicious computer software, Haley said.

The iBotnet is a sign that harmful programs are moving toward Mac, said Paul Henry, a forensics and security analyst at Lumension Security in Arizona.

Link


Good, it's about time this happened. Now I don't have to listen to those Smug Bastards that think their Mac's are unable to be infected with viruses or be hacked. I always told them it was because no one really cared about them (their computers and them personally).
Abusive comment hidden. (Show it anyway.)
1) It's not a virus, Dru. It's just not. Sorry.

2) The installer is attached to pirated installers for other commerical products. In other words, only those who are attempting to install stolen software will be infected.

That means the the smug Mac users who believe in paying content producers for their work are just fine.
Abusive comment hidden. (Show it anyway.)
Why is it that every time malware comes out for an Apple product, it's touted as being the "first ever?" This is nothing new, it's just that the malware for Apple products don't spread the way that Windows virii tend to spread. Way to stay "neat" Neatorama.
Abusive comment hidden. (Show it anyway.)
There's always been malware designed for Apples - this is far from the first. The difference is that OS X is genuinely more secure than Windows+IE, which is why there still aren't any self-spreading Mac viruses or worms. For example this trojan requires the user to download and install a corrupted copy of Photoshop or iLife, entering admin passwords along the way. Which is probably why McAfee dismissed this trojan - identified back in January by the way - as minor and largely irrelevant.

It's not a matter of being smug. It just a matter of one system allowing infection if you click on the wrong link, and one system not. But of course I may be wrong, Windows is just as securely designed as OS X. and that Mac malware apocalypse really is coming. Any minute now...
Abusive comment hidden. (Show it anyway.)
Nope I'm not a smug bastard, I'm just an a$$ with an opening who knows who my father is... but at least I'm honest about it unlike most people who leave comments on websites. Wait a minute that sounds kind of smug.....oh yeah just refer back to the a$$ part...
Abusive comment hidden. (Show it anyway.)
Sorry, but this is not news: see http://macs.about.com/b/2009/04/16/symantec-discovers-ibotnet.htm

I think the only news here is that Symantec is trying to panic Mac users into buying their software.
Abusive comment hidden. (Show it anyway.)
Hopefully something like this will make Mac users more aware of the dangers out there. I use one myself, and I hate how the only anti-virus software for them are ones that only protect against app-specific malicious software (eg, Microsoft Office). Talk about a false sense of security. Right now, Macs are like the yummy, yummy rabbits of the computing world.
Abusive comment hidden. (Show it anyway.)
A trojan horse is like three card monte, you only lose if you play. A trojan horse is like a vampire who has to ask permission to come in. A trojan horse is like the trojan horse, using social engineering where normal engineering failed. A malicious web link or misrepresented software download has to gain the attention of the user in order to gain control of the machine. It is not a security issue. Any operating system is vulnerable to the ignorance of the user, be it through malicious intent or innocent mistake. An operating system that does not let you make mistakes, like iPhone, causes an outcry in a wholly different direction and incites people to jailbreak the device specifically so it is vulnerable to their whims.
Abusive comment hidden. (Show it anyway.)
This, like several that have come along before, require a user to download a file to their computer, then manually install it. Not likely to infect even a dunce user.
Abusive comment hidden. (Show it anyway.)
To amend my earlier post, you must download a pirated version of iLife in order to become infected. And then, the trojan won't spread from computer to computer like on Windows PCs. If you don't steal, you won't get this (or any other malware) on your mac.
Abusive comment hidden. (Show it anyway.)
If someone convinced people to swallow cat turds, should the headline be "CAT TURDS - THE NEW CYANIDE!!"

Or should it "Dumbasses swallow cat turds. Unrelated - Cyanide still bad for you."
Abusive comment hidden. (Show it anyway.)
Its like a glorious virus is unleashed to a civilization where its technology is not developed enough to create vaccines (not just for this virus, but vaccines in general) and everyone blames deaths on magic
Abusive comment hidden. (Show it anyway.)
Malware vs Virus is kind of an issue of semantics (or is it Symantec(s)LOL). Come on its an attack on your OS and it was only a matter of time before some came after the Mac OS.

See the following truths

1> Yes, the Mac OS has been attacked before

2> Microsoft's OS has been and is attacked much more frequently.

3> Any OS is vulnerable

4> People who unleash malicious software are either douche bags or deliberate criminals.

5> Don't put it past a corporation to create a threat so that they can profit.

6> Your OS does not define you as a person, get over it.
Abusive comment hidden. (Show it anyway.)
I remember fixing the various viruses on my then girlfriend's Mac... 512KE... back around 1987. But who's keeping track? It didn't have a hard drive, so they didn't count, right?
Abusive comment hidden. (Show it anyway.)
"The difference is that OS X is genuinely more secure than Windows+IE, which is why there still aren’t any self-spreading Mac viruses or worms."

Geez, people are still buying into this old canard, eh? Listen, people... OS X is genuinely SAFER, not more secure, than Windows+IE. The statement above simply could not be less true. OS X -- as wonderful an OS as it is -- includes practically zero protection against malware. It's not designed with malware defense in mind, nor does it have anti-malware features built into it. Why? Because it doesn't need it. Read this next sentence twice, please: There are not enough Mac users in the world to ensure viable paths through which malware can propagate. It's as simple as that.

If you have sex with your wife without a condom, you are less secure than a guy who bangs fifty women with a condom, because you have not taken any protective measures and he has. But you are SAFER than the other guy because of conditions that have nothing to do with your level of security. He is potentially being exposed to assorted diseases, whereas you are under no such threat. Unless your wife is screwing around, you're safe, and no security measures are required.

Of course if your wife gets really popular all of a sudden, you may be in trouble. Remember that when encouraging your friends to buy Macs. If Apple ever manage to achieve anything close to 30% market share, and those propagation paths start looking more and more practical, it's going to be a rude awakening.

Can we move on now?
Abusive comment hidden. (Show it anyway.)
As has been pointed out above, Macs (and pretty much any computer ever) have always been vulnerable to Trojans. It's viruses that they've generally avoided. The benefit, for the time being at least, is that there aren't many of either targeted for the Mac.

On the one hand, yeah, there may be an explosion down the road. On the other hand, you can generally just not worry about it right now. Also, you get to be a bit smug at your neighbors. (Guess which option I chose?)
Abusive comment hidden. (Show it anyway.)
Well, Nothing is Impossible.. We just gotta think Apple think Innovative to create a worm.. LOL!!

And does why the heck this happens when I'm buying my first Apple?
Abusive comment hidden. (Show it anyway.)
Login to comment.
Click here to access all of this post's 27 comments




Email This Post to a Friend
"Apple's First Trojan Horse"

Separate multiple emails with a comma. Limit 5.

 

Success! Your email has been sent!

close window
X

This website uses cookies.

This website uses cookies to improve user experience. By using this website you consent to all cookies in accordance with our Privacy Policy.

I agree
 
Learn More