Spyware Warrior

datababe · Posted: Tue Jan 15, 2008 8:22 am Post subject: First rogue cleaner for the Mac

Well, it was only a matter of time:

http://www.f-secure.com/weblog/archives/00001362.html

datababe · Posted: Tue Jan 15, 2008 10:07 am Post subject:

Okay, now I'm wondering...

http://forums.macrumors.com/showthread.php?t=83743

Is this just a new spin on old news? Rolling Eyes

_________________
- Datababe
Until you spread your wings, you'll have no idea how far you can walk.
http://redoakranch.x10hosting.com
http://datababe007.blogspot.com

tripkill201 · Posted: Tue Jan 15, 2008 1:29 pm Post subject:

It doesn't help that there's a rogue codec for the Mac roaming out on pr0n sites either. Looks like those Mac commercials about it being safer than Windows from malware are going to be out of date really, really soon, deducing from the current string of attacks. I wonder what used-to-be Windows-specific malware will be cloned next for Mac, Virtumonde? We already have Zlob/fake codec and SmitFraud clones.
_________________

The stakes are immense, the task colossal, the time is short. But we may hope — we must hope — that man’s own creation, man’s own genius, will not destroy him. -Albert Einstein

mikey · Posted: Tue Jan 15, 2008 1:58 pm Post subject:

Ref; http://www.heise-security.co.uk/news/101821

Nightmaretony · Posted: Tue Jan 15, 2008 3:39 pm Post subject:

uh Eric, methinks it is a hint as to the rogue software gallery may need a little....updating....
_________________
For this is the place
where dreams
and nightmares
are birthed
and bred

Nightmare Park

suzi · Posted: Tue Jan 15, 2008 10:22 pm Post subject:

If you are addressing Eric, he won't see it here.
_________________
Former Microsoft MVP 2005-2009, Consumer Security
Please do not PM or Email me for personal support. Post in the Forums instead and we will all learn. Smile

Nightmaretony · Posted: Wed Jan 16, 2008 9:28 am Post subject:

I was. Bleah. I remember he was going for a giant update. Problem is, the world is moving so fast on it, better to get the update going half (biblical beast of burden) than to keep waiting and let the world pass on by. I consider the rogue list canonical, but only until it stopped being updated.
_________________
For this is the place
where dreams
and nightmares
are birthed
and bred

Nightmare Park

datababe · Posted: Wed Jan 16, 2008 11:46 am Post subject:

I'm loving the comments on the f-secure blog. Very Happy

http://www.f-secure.com/weblog/archives/comments.html?PostID=00001365

Website already blocked at my place of employ. Wink

(go me!)
_________________
- Datababe
Until you spread your wings, you'll have no idea how far you can walk.
http://redoakranch.x10hosting.com
http://datababe007.blogspot.com

suzi · Posted: Wed Jan 16, 2008 11:56 am Post subject:

Nightmaretony · Posted: Wed Jan 16, 2008 1:14 pm Post subject:

I will. Thanks. (gotta keep the kick going to keep things runnin Smile

_________________
For this is the place
where dreams
and nightmares
are birthed
and bred

Nightmare Park

Bobbi Flekman · Posted: Thu Jan 17, 2008 3:14 am Post subject:

Just a few that I could find in a short time...

16 February 2006: OSX/Leap.A
18 February 2006: OSX/Inqtana-A
30 June 2006: OSX.Exploit.Lauchd
2 November 2006: OSX.Macarena

For OS 9 there are also several infections.

Mac users will have to get used to being consciously using protection against malware. The marketshare is growing, so more and more a viable platform for malware writers to make a buck.

Luckily security theory is platform independant because Mac users will have to do the same stuff that Windows users have to.
_________________
[url="http://www.uniteagainstmalware.com/forums/"]

[/url]

datababe · Posted: Fri Jan 18, 2008 4:16 pm Post subject:

Luckily, malware and malware-removal frauds are pretty much mainstream news these days, and groups and forums (like this one) are now firmly in place to quickly check out these scams as soon as they surface, and equally quickly spread the word. It's not quite the same wide open, virgin territory that the first wave of con artists enjoyed. Yes, it's still a battle, but there's more people in the fray against the crooks now, and they're better informed and better armed.

I know it's just the first shot across the bow, but I'm hoping these MacSweeper macaroons turn out to be representative of other up and coming Mac attackers. If that were to be the case, Mac users may still not have too much to worry about. Wink

_________________
- Datababe
Until you spread your wings, you'll have no idea how far you can walk.
http://redoakranch.x10hosting.com
http://datababe007.blogspot.com

suzi · Posted: Fri Jan 18, 2008 7:54 pm Post subject:

I think this rogue is new but has the same name as a legitimate older application. I read that somewhere, can't remember where now.
_________________
Former Microsoft MVP 2005-2009, Consumer Security
Please do not PM or Email me for personal support. Post in the Forums instead and we will all learn. Smile

Nick · Posted: Fri Jan 18, 2008 9:12 pm Post subject:

There was an older program called Macsweeper, but it's been dead for awhile. If you search the Macworld forums or other Mac sites, you can come across old posts about it.

This particular rouge is a complete joke. They must not know their Unix because the program doesn't ask for an admin password when it installs. Thus it does not ave root access and can be easily removed by dragging it to the Trash and emptying the Trash.
_________________
Nick's Security Ticker