Firefox

The First Mac OS X Virus?

Finally, we have the first Mac OS X virus? (This may sound weird to the poor Windows users… )

Leap.A

When executed, Leap.A displays a message in a Terminal window and then creates a series of files in /tmp (a system temporary files folder).

Leap.A then uses the OS X Spotlight search program to find the four most recently used applications that do not require root permissions. It infects these files if they do not have the oompa extended attribute

Leap.A also monitors all running programs, and when iChat is run, it sends an infected file named latestpics.tgz to all contacts on the user’s iChat buddy list.

Bugs in the infection routine cause infected programs to run incorrectly, and in some cases, the propagation routine through iChat may not work.

Inqtana.A

Inqtana is a Bluetooth worm written in Java and only affects OS X 10.4 (Tiger). It exploits the Apple Mac OS X BlueTooth Directory Traversal Vulnerability which Apple patched almost a year ago.

The propagation routine sends out three files using the Bluetooth OBEX push; the recipient user must accept these files (w0rm-=support.tgz, com.openbundle.plist and com.pwned.plist). The BlueTooth Directory Traversal Vulnerability is then used to run these three files. This creates other files on the system, installs the Inqtana program and sets itself to run when the system starts.

My two cents

I am not sure if this is the beginning of Mac OS X users’ nightmare. Virus-free is always what a Mac OS X user proud of. Will we end up fighting with viruses like Windows users? By the way, get the free Mac OS X antivirus (e.g.: ClamXav ) ready for any unexpected threats.

[Read ABC News]

Technorati Tags: , , ,

Digg it! Digg it    Add to del.icio.us Add to del.icio.us    Add to Furl Furl it    Add to Spurl Spurl it    Blink it Blink it

Leave a Reply