Post by: gunug on January 23, 2009, 08:37:35 AM
QUOTE
Pirated copies of Apple Inc.'s new iWork '09 application suite that are now available on file-sharing sites contain a Trojan horse that hijacks Macs and leaves them open to further attack, a security company said yesterday.
The "iServices.a" Trojan hitchhikes on iWork '09's installer, said Intego, an Austin-based company that specializes in Mac security software. "The installer for the Trojan horse is launched as soon as a user begins the installation of iWork, following the installer's request of an administrator password," Intego said in a warning published Wednesday.
Once installed, the Trojan "phones home" to a malicious server to notify the hacker that the Mac has been compromised, and to await instructions. Intego did not spell out what second-stage actions the iServices.a Trojan takes but noted that they could include delivering additional malware to the hijacked machine.
http://www.computerworld.com/action/articl...ticleId=9126609 <- Original link
The "iServices.a" Trojan hitchhikes on iWork '09's installer, said Intego, an Austin-based company that specializes in Mac security software. "The installer for the Trojan horse is launched as soon as a user begins the installation of iWork, following the installer's request of an administrator password," Intego said in a warning published Wednesday.
Once installed, the Trojan "phones home" to a malicious server to notify the hacker that the Mac has been compromised, and to await instructions. Intego did not spell out what second-stage actions the iServices.a Trojan takes but noted that they could include delivering additional malware to the hijacked machine.
http://www.computerworld.com/action/articl...ticleId=9126609 <- Original link
Also don't teach your grandma to dip snuff!
Post by: Paddy on January 23, 2009, 08:48:37 AM
(And a good warning that illegally downloaded files are often not what they seem)And just to clarify things - this has absolutely NOTHING to do with the Pages '09 issue where it mysteriously connects to DoubleClick. That happens with legitimate copies of iWork (from the DVD).