SecureMac Security Advisory for Apple OS X
President Nicholas Raba stated, "The increased number of threats, security advisories, and security updates is an indication that Mac users must pay attention to computer security issues. As Apple's market share continues to grow, so will security research and hack attempts against OS X".
The Trojan horse runs hidden on the system, and allows a malicious user complete remote access to the system, can transmit system and user passwords, and can avoid detection by opening ports in the firewall and turning off system logging. Additionally, the AppleScript.THT Trojan horse can log keystrokes, take pictures with the built-in Apple iSight camera, take screenshots, and turn on file sharing. The Trojan horse exploits a recently discovered vulnerability with the Apple Remote Desktop Agent, which allows it to run as root.
The Trojan is distributed as either a compiled AppleScript, called ASthtv05 (60 KB in size), or as an application bundle called AStht_v06 (3.1 MB in size). The user must download and open the Trojan horse in order to become infected. Once the Trojan horse is running, it will move itself into the /Library/Caches/ folder, and add itself to the System Login Items.
Protection: To protect your system against this threat, run MacScan 2.5.2 (http://macscan.securemac.com/) (MacScan is a product of SecureMac) with the latest Spyware Definitions update (2008011), dated June 19th, 2008. SecureMac recommends that users download files only from trusted sources and sites.
About SecureMac:
Since 1999, SecureMac.com has been at the forefront of Macintosh system security. The site not only features complete Macintosh Anti-Spyware and Antivirus solutions, but also operates as a clearinghouse for news, reviews and discussion of Apple computer security issues. Users from novice to the most advanced will find useful information at SecureMac that is designed to make their computer experience trouble free. More information: http://macscan.securemac.com.
SecureMac Security Advisory for Apple OS X
3107 readers online...
- Syndication Directory
- Security
- XenCare Software Introdu
- NSS Labs Extends Third B
- Mailshells Reputation Se
- GadgetTrak Search Destro
- Privacyware and PC Stars
- The Integration Consorti
- Beijing Olympic Reunion
- Logical Security Expands
- Special Summer Offers On
- CAPE Credit Union to Dep
- Explosive Growth in Port
- SpectorSoft Again Makes
- AVG AntiVirus Rescues Hy
- ProtectPoint Security In
- Intellitactics Hosts Web
- Search Engine for Video
- NetSuite A Leader Silic
- Small Businesses Now Hav
- Secure Elements C5 Compl
- NameCheap Offers Free Co
- Digital Signatures Made
- Another Expansion Announ
- Express Metrix Introduce
- Boston Inventor Entrepre
- Security+ Enhancements E
- SailPoint Calls for Indu
- AVIcode Counted Among To
- TrustDefender Announces
- Actinic Selects GlobalSi
- Third Brigade Acquires O
- New Security Awareness P
- Hostway Upgrades Managed
- Smarter Security Systems
- Former AGs Biometric Sof
- Data Security Bible for
- Who Wants to Recoup $1 M
- Smarter Security Systems
- Kaseya Empowers Green IT
- Cyveillances Cyber Intel
- Data Devices Internation
- ParetoLogic Honoured wit
- GTT to Sell Network Tran
- Important Amendments to
- ANSIs Director of Homela
- AppGate Receives Network
- Prevx Sees Dramatic Incr
- ISO 27001 Information Se
- Oxygen Forensic Suite 2
- Content Archiving Leader
- Datacraft Achieves Stron