First fake-installer Trojan for Mac OS

TheKid7 · Dec 12, 2012

First fake-installer Trojan for Mac OS:

Russian anti-virus company Doctor Web informs users about a new Trojan for Mac OS X dubbed Trojan.SMSSend.3666. The malicious scheme used to spread this Trojan is notorious among many Windows users but until now it hasn't been employed to deceive owners of Macs. Trojan.SMSSend is a fake installer which can be downloaded from various sites under the guise of useful software...........
Click to expand...

http://news.drweb.com/?i=3138&c=5&lng=en&p=0

Rmus · Dec 12, 2012

As before, the malicious application is spread under the ill-famed "affiliate programme" ZipMonster that helps fraudsters craft such fake installers and assists in delivering payments to distributors of malware.
Click to expand...

This exploit falls into the category, "you get what you pay for." ZipMonster malware has been around for a long time.

Note the Doctor Web admonition:

Doctor Web once again warns users against installing programs if they are required to submit their phone number or send a text message—most likely, you will lose money and end up with nothing. Moreover, you will most likely be able to find the program you want with a search engine and download it free of charge from an official site of its developers.
Click to expand...

Also:

It should be noted that Trojan.SMSSend.3666 is the first program of its kind that targets Mac OS X.
Click to expand...

True, but social engineering exploits have targeted Mac users for at least 5 years:

DNS changer Trojan for Mac (!) in the wild
Published: 2007-11-01
http://isc.sans.org/diary.html?storyid=3595

This malware shows that we must not ignore Mac machines and that Mac users should not think they are invulnerable just by using a Mac and that they can click on absolutely everything.
Click to expand...

----
rich

Rmus · Dec 14, 2012

To re-emphasize the Dr. Web security tip:

http://news.cnet.com/8301-1009_3-57558780-83/new-trojan-attempts-sms-fraud-on-os-x-users/

As with all Trojans, these pose as legitimate programs that are made available for download from a number of underground Web sites,...

However, overall the main security tips emphasized by this development are to first check where any installer for your system came from, and then be cautious about giving out personal information including phone numbers and addresses. This is especially true for any installer you downloaded from a site that is not directly from the developer itself.
Click to expand...

----
rich

Log in or Sign up

First fake-installer Trojan for Mac OS

TheKid7 Registered Member

Rmus Exploit Analyst

Rmus Exploit Analyst

Log in or Sign up

First fake-installer Trojan for Mac OS

TheKid7 Registered Member

Rmus Exploit Analyst

Rmus Exploit Analyst

Useful Searches