NEP
10-28-2010, 01:16 AM
A new Trojan horse that not only affects Windows, but Mac OS X as well, has appeared on social networking sites (including Facebook), primarily disguised as a video. When users click an infected link along the lines of "Is this you in this video?", a Java applet downloads multiple files, including an installer that runs automatically without the user's knowledge. The malware also bypasses the usual password verification OS X requires for installation.
Dubbed trojan.osx.boonana.a by SecureMac, it launches automatically on startup, communicates with command and control servers, and can also crack user accounts on other sites to continue infecting others. The security firm notes that it can spread itself to both Mac OS X and Windows, explaining that recent reports of similar Trojan horses targeted Windows, but did not included cross-platform capabilities.
Microsoft recently published data showing an "unprecedented wave" of Java malware exploits during the third quarter of this year. As we've already argued before, Java is on Apple's kill list, and we think security could be the primary reason.
Source: TechSpot (http://www.techspot.com/news/40887-new-java-trojan-attacks-mac-os-x-and-windows.html)
Dubbed trojan.osx.boonana.a by SecureMac, it launches automatically on startup, communicates with command and control servers, and can also crack user accounts on other sites to continue infecting others. The security firm notes that it can spread itself to both Mac OS X and Windows, explaining that recent reports of similar Trojan horses targeted Windows, but did not included cross-platform capabilities.
Microsoft recently published data showing an "unprecedented wave" of Java malware exploits during the third quarter of this year. As we've already argued before, Java is on Apple's kill list, and we think security could be the primary reason.
Source: TechSpot (http://www.techspot.com/news/40887-new-java-trojan-attacks-mac-os-x-and-windows.html)