[ISN] Another Security Threat Aimed At Macs Found On The Web

From: InfoSec News <alerts_at_infosecnews.org>
Date: Thu 26 Jun 2008 - 03:32:47 CDT
http://www.informationweek.com/news/security/client/showArticle.jhtml?articleID=208800731

By Antone Gonsalves
InformationWeek
June 25, 2008

Another Trojan targeting the Mac has been found on the Web, as the 
number of malicious applications increases with the growing popularity 
of Apple computers.

Security vendor Intego discovered the latest malware masquerading as a 
program for Mac OS X called "PokerGame." The application is a script 
wrapped in an executable bundle that's distributed by e-mail as a Zip 
file.

When opened, the "PokerStealer Trojan" asks the victim for his 
administrator's password. If it's given, the program then opens a secure 
shell, or SSH, on the Mac to establish communications with a remote 
server, Intego said. SSH is a network protocol that allows data to be 
exchanged using a secure channel between two computers.

Once communications between the infected computer and server have been 
established, the Trojan sends the user name and password, along with the 
IP address of the Mac. After gaining access to the computer, hackers can 
attempt to take control of them, delete files, damage the operating 
system, or perform other tasks.

[...]
Received on Thu Jun 26 03:32:47 2008
Google
 
Web www.infosecnews.org