Recently a Trojan horse has been appearing in copies of iWork 09, the latest edition of the popular Mac productivity suite. OSX.Trojan.iServices.A is considered a serious threat according to Intego, a Mac security software developer. These pirated copies contain a real working iWork 09 but also an extra package called iWorkServices.pkg. This once again reaffirms that Macs are NOT immune to malware.
Once a user starts installing iWork the trojan gets installed in /System/Library/StartupItems/iWorkServices. In the newer versions of Mac OS it will ask for an administrator password but in older versions it won’t. This path normally contains Apple startup items. This gives the the trojan complete read and write access for the root (ie complete control).
Full article:
http://www.blogpirate.org/2009/01/22/mac-trojan-circulating-in-pirated-copies-of-iwork-09/
............................................................................................
Site Admin / Security Administrator
Virus Removal ~ OS Support ~ Have we helped you? Help us! ~ GeekChat
- Please PM me if I fail to respond within 24hrs.
Once a user starts installing iWork the trojan gets installed in /System/Library/StartupItems/iWorkServices. In the newer versions of Mac OS it will ask for an administrator password but in older versions it won’t. This path normally contains Apple startup items. This gives the the trojan complete read and write access for the root (ie complete control).
Full article:
http://www.blogpirate.org/2009/01/22/mac-trojan-circulating-in-pirated-copies-of-iwork-09/
Site Admin / Security Administrator
Virus Removal ~ OS Support ~ Have we helped you? Help us! ~ GeekChat
- Please PM me if I fail to respond within 24hrs.