[prev in list] [next in list] [prev in thread] [next in thread] 

List:       isn
Subject:    [ISN] Another Security Threat Aimed At Macs Found On The Web
From:       InfoSec News <alerts () infosecnews ! org>
Date:       2008-06-26 8:32:47
Message-ID: Pine.LNX.4.61.0806260332360.7893 () conundrum ! infosecnews ! org
[Download RAW message or body]

http://www.informationweek.com/news/security/client/showArticle.jhtml?articleID=208800731

By Antone Gonsalves
InformationWeek
June 25, 2008

Another Trojan targeting the Mac has been found on the Web, as the 
number of malicious applications increases with the growing popularity 
of Apple computers.

Security vendor Intego discovered the latest malware masquerading as a 
program for Mac OS X called "PokerGame." The application is a script 
wrapped in an executable bundle that's distributed by e-mail as a Zip 
file.

When opened, the "PokerStealer Trojan" asks the victim for his 
administrator's password. If it's given, the program then opens a secure 
shell, or SSH, on the Mac to establish communications with a remote 
server, Intego said. SSH is a network protocol that allows data to be 
exchanged using a secure channel between two computers.

Once communications between the infected computer and server have been 
established, the Trojan sends the user name and password, along with the 
IP address of the Mac. After gaining access to the computer, hackers can 
attempt to take control of them, delete files, damage the operating 
system, or perform other tasks.

[...]


_______________________________________________      
Attend Black Hat USA, August 2-7 in Las Vegas, 
the world's premier technical event for ICT security experts.
Featuring 40 hands-on training courses and 80 Briefings 
presentations with lots of new content and new tools.
Network with 4,000 delegates from 50 nations.  
Visit product displays by 30 top sponsors in 
a relaxed setting. http://www.blackhat.com
[prev in list] [next in list] [prev in thread] [next in thread]