www.smh.com.au

Trojan targets Mac users

November 2, 2007 - 12:05PM

In a backhanded compliment to Apple, online criminals are apparently so impressed with its scorching sales they are sending Macintosh computers an attack typically aimed at machines running Microsoft's dominant Windows operating system.

Symantec researchers said the websites serving up the new attack also deploy a Windows version.

"For a while Mac users have enjoyed the benefits of being a small enough population that hackers didn't go after them directly - that's obviously now changing," said Ben Greenbaum, senior research manager at Symantec Security Response.

Lynn Fox, an Apple spokeswoman, said the company knows about the threat and urges Mac users to be careful about where they download things from.

"Apple has a great track record for keeping Mac OS X users secure, and as always, we encourage people to install software only from trusted sources," she said in a statement.

Online porn-hunters are the intended victim of the latest ploy, in which visitors to certain explicit websites are led to believe they're downloading a free video player when in fact they're installing malicious code onto their Macs.

Once the user authorises the transaction, the fraudsters can redirect his future browsing to fraudulent websites and possibly to steal his information or passwords or simply send ads for other pornographic websites and rake in advertising US dollars.

For example, a person using an infected computer may thinks he is going to online auctioneer eBay or its PayPal electronic payment division but actually be directed to a site that looks legitimate but exists to purloin personal information.

The attack does not target a vulnerability in the Macintosh operating system.

Instead, it requires a user to approve the download, then enter his computer's administrator's password to continue, operations that raise red flags among sophisticated computer users.

Symantec researchers said the Trojan used in the attack is a rejiggered version of one that's been around for a couple years and requires that victims fall for a social engineering trick to work.

Security researchers at Intego, which makes Macintosh antivirus software and discovered the scheme this week, said it underscores the mounting threats to Mac users as the machines grow in popularity.

Windows machines still dominate the PC market, but Apple, which for years commanded just 2 to 3 per cent of the U.S. market, has now grown to command an 8 per cent chunk, according to market researcher Gartner Inc.

"This is the first really malicious criminal malware (for Macs)," said Intego spokesman Peter James. "We've seen some proof-of-concept malware, we've seen some worms, but this is different."

AP

When news happens: send photos, videos & tip-offs to 0424 SMS SMH (+61 424 767 764), or us.

Get the Herald home delivered each weekend - just $30 for 3 months