More Mac Malware Spotted — Another attempt of the Video codec type trojan attack.

Digital Trends ^ | July 09, 2009 | by Christopher Nickson

[Swordmaker]

A new attack on the Mac OS X has been seen in the wild, as numbers of Mac malware grow.

So you thought that Mac was safe from malware? It’s definitely time to think again. There might be nothing like the amount of malware there is for PCs, but the numbers are growing.

The latest is known as Puper, a Trojan that disguises itself as a video program for the fictional MacCinema system on OS X.

Researchers at McAfee Avert Labs have determined that the malware attack appears as a disk image, which then launches an installer application for the non-existent software. Once installed, the user’s computer is infected with a malicious script file called AdobeFlash.

This then launches itself punctually every five hours and tries to download, then launch, other malware on the system.

By pretending to be a video player or plug-in, the new malware uses the same system as other recent Mac attacks.

Although attack numbers remain small, Mac users are advised to still take basic security measures, including not downloading files or attachments they feel to be suspicious.

[Swordmaker]

It still requires the user to give permission to download it, run it for the first time, and an administrator name and password to install it. It's a trojan.

[Swordmaker]

MacCinema Project.

Don't download it: It's a trojan horse. . . PING!

I think that brings the total number of Mac OS X Trojans to 15.

Mac Malware Ping!

If you want on or off the Mac Ping List, Freepmail me.

[JSteff]

“I think that brings the total number of Mac OS X Trojans to 15.”

Known mac os trojans......

/s

[PA Engineer]

A new attack on the Mac OS X has been seen in the wild, as numbers of Mac malware grow.

I never really heard of any self-replicating in the wild, but if maybe there was one and maybe now if there is two, then I guess you could say it is growing.

McAfee Avert Labs have determined that the malware attack appears as a disk image, which then launches an installer application for the non-existent software.

Oh wait a minute. I have to give it permission to install. I guess replicants would give it permission to install.

Although attack numbers remain small, Mac users are advised to still take basic security measures, including not downloading files or attachments they feel to be suspicious.

I assume that includes McAfee Fud virus software.

[Ha Ha Thats Very Logical]

I've read about a few of these now, and they always say something about how it tried to download other malware onto the system. But it never says what that other malware does, or even whether it actually succeeds in downloading any.

[Swordmaker]

I've read about a few of these now, and they always say something about how it tried to download other malware onto the system. But it never says what that other malware does, or even whether it actually succeeds in downloading any.

BINGO! We have a winner! Those that have been tested in security labs have failed to successfully download and install anything. To do so requires ROOT access or the administrator of the computer to enter his name and password to temporarily activate SUDO (SuperUser DO).

[miliantnutcase]

Stay off the pron sites and you won’t have to worry about these.

[Swordmaker]

Stay off the pron sites and you won’t have to worry about these.

If I have to download some non-standard file codec or video viewer to see the pron, then there is something decidedly phishy about the site.

[gitmo]

I thought trojans protected you on those sites.

[RightOnTheLeftCoast]

"I never really heard of any self-replicating in the wild, but if maybe there was one and maybe now if there is two, then I guess you could say it is growing."

100% growth rate!! We're all gonna die!!

[WVKayaker]

I think they come from Denmark...

[miliantnutcase]

lol

[Peanut Gallery]

The article says Adobe Flash is malicious script. I thought Flash is a real Adobe product?

[AFreeBird]

Flash is a real Adobe product. This malware is trying to disguise itself that way.

[AFreeBird]

Flash is a real Adobe product. This malware is trying to disguise itself that way.