Apple
Malware authors have spammed Mac forums with links for pornographic websites

Phishing Trojan targets Mac OS X

Fake codec delivers Mac malware

Written by Shaun Nichols in California

Security vendor Intego claims to have uncovered a new Trojan attack that targets Apple's OS X operating system.

The OSX.RSPlug.A Trojan disguises itself as a video codec that offers access to a pornographic video.

Intego said that malware authors have spammed Mac forums with links for pornographic websites hosting the malware.

Users attempting to install the codec receive a piece of malware classified as a 'DNS Changer' which modifies the way OS X handles the DNS requests used to link numerical IP addresses to web URLs.

The tool allows the attackers to redirect web traffic. Users attempting to visit PayPal, eBay or certain banking sites, for instance, will be directed to a phishing website instead.

If confirmed, the Trojan would be the first piece of truly malicious software to be targeted at OS X.

Researchers have previously developed OS X attacks and exploits, but these were largely proof-of-concept attacks that lacked a malicious payload.

While security experts agree that such malware would pose a very serious threat to Mac users, it remains unclear just how far the reported Trojan has spread.

Early on Wednesday morning, representatives for McAfee, Symantec and Trend Micro told vnunet .com that their researchers had been unable to find the Trojan in the wild or obtain a sample from Intego.

A spokesperson for Symantec suggested that Intego "has a tendency to over-hype things".

UPDATE: McAfee has confirmed the existence of the OSX.RSPlug.A Trojan and reported that it is spreading through fake codec sites in addition to the porn website.

Tags:

Further reading

Mac Trojan attack gathers steam

OS X attack being served up with PC malware   More...

Leopard roars to two million sales

Opening weekend best ever for MacOS   More...

Special Report: Apple iPhone

All the latest news on Apple's iPhone   More...

Leopard users unable to run Java 1.6

Developers claim Java 6 absent from new Apple OS   More...

Related articles

Mutant Trojans threaten Mac users

Malware authors tweaking payload, say researchers   More...

Mac Trojan attack gathers steam

OS X attack being served up with PC malware   More...

Malware writers exploit Bhutto killing

Hackers use assassination to push Trojans   More...

Experts sound alarm on Silentbanker Trojan

More than 400 banks on malware hitlist   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

13 May 2008

3.06 MBBloody students, goodbye to Dixons and hacking excuses More...

BusinessGreen.com podcast logo

13 May 2008

1.82 MBEco-Entrepreneur introduction More...

12 May 2008

2.4 MBMicrosoft's battles, data breach fines and website rip-offs More...

Poll

DATA ENCRYPTION

DATA ENCRYPTION

Should encryption be mandatory for all personal data held by companies and governments?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

BlackBerry Bold

RIM unveils slimmed-down BlackBerry Bold

New handset due this summer   More...

BlackBerry Bold

BlackBerry Bold takes on 3G iPhone

New models go head-to-head, says analyst   More...

Advertisement

HP

HP 'in talks' to buy EDS

Company offering upwards of $12bn   More...

Virgin Media

Virgin prepares 50Mbps launch in 2008

Successful trial clears network for higher speeds   More...

Advertisement