topics that matter; ideas worth sharing

share a tip, submit a link, add something new

Sophos warns of Mac Trojan malware

March 31, 2008, 10:26 AM —  Macworld.co.uk — 

Security consultant Sophos is warning of the appearance of money-grabbing Trojan
Horse malware aimed at Macs.

The firm isn't being alarmist with news of the Imunizator Trojan, which makes
false claims that Macs have privacy problems as part of its attempt to install
itself. Sophos advises users not to panic.

The Trojan, also known as Troj/MacSwp-B, tries to scare Mac users into purchasing
unnecessary software by claiming that privacy issues have been discovered on
the computer.

"Windows users are no stranger to scareware like this, but it is rarer
on the Mac. Nevertheless, the discovery of this Trojan horse does follow fast
on the heels of other malware that has been identified on Mac OS X in recent
months," said Graham Cluley, senior technology consultant for Sophos.

"Cybercrime against Mac users may be small in comparison to Windows attacks,
but it is growing. Mac users need to learn from the mistakes made by their Windows
cousins in the past and ensure that they have defenses in place, are up-to-date
with patches and exercise caution about what they run on their computer."

Sophos experts note that the new Trojan horse is closely related to another
piece of Mac scareware, MacSweeper, which was being deployed in an attack via
online adverts on ITV.com and the website of the Radio Times last month.

"It's not unusual to see hackers repackage their malware in a variety
of disguises to try and sneak it past anti-malware software," explained
Cluley.

Earlier this year Sophos published its annual Security Threat Report, which
described how financially motivated hackers had targeted Macs for the first
time in 2007.

» posted by abennett

Macworld.co.uk

I like it!
Post a comment
The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.
Resources
White Paper

Symantec Backup Exec 12 and Backup Exec System Recovery 8 deliver industry leading Windows data protection and system recovery. Download this whitepaper to find out the top reasons to upgrade and how to get continuous data protection and complete system recovery.

Webcast

Data and system loss — from a hard drive failure, malicious attack, natural disaster, or simple human error — can happen anytime. Don’t leave your business vulnerable. Make sure you have a secure recovery strategy in place. Symantec's latest backup and system recovery technology can efficiently restore critical applications, individual emails and documents and even restore your entire system in minutes in the event of a loss.

White Paper

Businesses face a growing challenge to ensure that the IT environment is properly protected. Backup Exec 12 integrates with other applications in the Symantec family of products, to complement your current data protection strategy, keep your data securely backed up and make it recoverable when you need it most.

Free stuff
Featured Sponsor

Get a broad understanding of important regulations and how you can make sure your site is in adherence.





Learn how VeriSign SGC-enabled SSL Certificates can help improve site security and customer confidence in the free white paper, "How to Offer the Strongest SSL Encryption." In this paper you will learn the differences between weak and strong encryption and what they mean for your site's performance.

Get VeriSign's free white paper: "The Latest Advancements in SSL Technology" and learn about the benefits of strong SSL encryption, Extended Validation (EV) SSL and security trust marks and what these SSL offerings can do for your site.

Now with Extended Validation (EV) SSL available from VeriSign, you can show your customers that they can trust your site. Learn about EV SSL benefits in this free VeriSign white paper.

More Resources