RSPlug.A Mac OS X trojan


	RSPlug.A Mac OS X trojan

acesomeone

11-1-2007 6:12 PM

319 views

tags:

apple, mac, os x, virus

acesomeone says:

Is the Mac now also becoming a target for malware?

Add a Comment

Login to Comment. Not a member yet? Sign up

Today's Top Clips

visit the Top Clips page

View the Top Clips from November 1, 2007

Embed This Clip In Your Site...

<div style="margin: 12px 0px; font-family: arial; color: #333333; background: #ffffff; border: solid 4px #e5e5e5; width: 100%; clear: left;"><div class="CM_CTB_Content_Wrap" style="margin: 0px; padding: 0px;background-color: #ffffff;"><div style="border-bottom: solid 1px #dcdcdc; white-space: nowrap; margin-bottom: 8px; background-color: #eeeeee ;background-image: url(http://www.clipmarks.com/images/source-bg.gif); background-repeat: repeat-x; height: 24px; line-height: 24px; vertical-align: middle; padding-bottom: 4px; color: #666666; font-size: 10px;" ><a href="http://clipmarks.com/clip-to-blog/" title="see clips that are hot right now"><img src="http://content.clipmarks.com/blog_embed/42edf102-6e44-46bb-a367-a54b8de715b7/3B46DCE9-101D-4A8C-B0C0-C79EF89B0A56/" alt="" width="19" height="19" border="0" style="vertical-align: middle; margin: 0px 4px; display: inline; border: none; float:none;" /></a>clipped from <a title="http://arstechnica.com/news.ars/post/20071101-rsplug-a-mac-os-x-trojan-a-new-threat-but-the-sky-is-not-falling.html" href="http://arstechnica.com/news.ars/post/20071101-rsplug-a-mac-os-x-trojan-a-new-threat-but-the-sky-is-not-falling.html" style="font-size: 11px;">arstechnica.com</a></div><blockquote style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" cite="http://arstechnica.com/news.ars/post/20071101-rsplug-a-mac-os-x-trojan-a-new-threat-but-the-sky-is-not-falling.html">the discovery of an actual malicious
trojan for the Mac</blockquote><div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div><blockquote style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" cite="http://arstechnica.com/news.ars/post/20071101-rsplug-a-mac-os-x-trojan-a-new-threat-but-the-sky-is-not-falling.html">the <A href="http://www.intego.com/news/ism0705.asp">OSX.RSPlug.A</A> trojan dresses up like said Quicktime
codec, requiring an administrator password to install.</blockquote><div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div><blockquote style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" cite="http://arstechnica.com/news.ars/post/20071101-rsplug-a-mac-os-x-trojan-a-new-threat-but-the-sky-is-not-falling.html">the "codec"
installer sets up a couple of fake DNS servers and a cron job that runs
every minute to reinstall the DNS servers in case they have been removed.</blockquote><div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div><blockquote style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" cite="http://arstechnica.com/news.ars/post/20071101-rsplug-a-mac-os-x-trojan-a-new-threat-but-the-sky-is-not-falling.html">the malicious DNS servers are asked to translate domain names into IP
addresses, allowing the person in charge of these servers to redirect
selected destinations.</blockquote><div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div><blockquote style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" cite="http://arstechnica.com/news.ars/post/20071101-rsplug-a-mac-os-x-trojan-a-new-threat-but-the-sky-is-not-falling.html">used for
phishing purposes "for sites such as eBay, PayPal and some banks"</blockquote><div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div><blockquote style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" cite="http://arstechnica.com/news.ars/post/20071101-rsplug-a-mac-os-x-trojan-a-new-threat-but-the-sky-is-not-falling.html">users who think they're secure just because they're using a Mac</blockquote><div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div><blockquote style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" cite="http://arstechnica.com/news.ars/post/20071101-rsplug-a-mac-os-x-trojan-a-new-threat-but-the-sky-is-not-falling.html">"the bad guys are taking Mac now seriously."</blockquote><div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div><blockquote style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" cite="http://arstechnica.com/news.ars/post/20071101-rsplug-a-mac-os-x-trojan-a-new-threat-but-the-sky-is-not-falling.html">Mac OS X will soon become a significant target for malware writers for the first time.</blockquote><div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div><blockquote style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" cite="http://arstechnica.com/news.ars/post/20071101-rsplug-a-mac-os-x-trojan-a-new-threat-but-the-sky-is-not-falling.html">The appearance of this trojan may mean that Apple has crossed some sort of threshold for malware writers.</blockquote><div style="height: 2px; font-size: 2px; background: #dcdcdc; border-bottom: solid 1px #f5f5f5; margin: 2px 4px;"></div><blockquote style="text-align: left; padding: 0px 8px; margin: 4px 0px 8px 0px; background: transparent; border: none;" cite="http://arstechnica.com/news.ars/post/20071101-rsplug-a-mac-os-x-trojan-a-new-threat-but-the-sky-is-not-falling.html">this
trojan does not exploit any Mac OS X weakness</blockquote></div><div style="margin: 0px 6px 6px 4px;"><table style="font-size: 11px;border-spacing: 0px;padding: 0px;" cellpadding="0" cellspacing="0" width="100%"><tr><td style="background:transparent;border-width:0px;padding:0px;">&nbsp;</td><td align="right" style="background:transparent;border-width:0px;padding:0px;width:107px" width="107"><a href="http://clipmarks.com/share/3B46DCE9-101D-4A8C-B0C0-C79EF89B0A56/blog/" title="blog or email this clip"><img src="http://content7.clipmarks.com/images/c2b-foot.png" border="0" alt="blog it" width="107" height="17" style="border-width:0px;padding:0px;margin:0px;" /></a></td></tr></table></div></div>

Clipmarks: Home; New Clips; Top Clips; Dashboard

Popular Topics: News; Life; Science; Technology; Entertainment

Get Started: Sign Up; Install Clipping Tool; How Clipping Works; Clip-to-Blog™; ClipSearch

Tools and Resources: FAQ; ClipWeek; Top Clippers; Top Tags; Site Map

About Clipmarks: About Us; Contact; Blog; Copyright; Privacy; EULA

Search Options

Today's Top Clips