Apple adds stealth patch to fix Trojan vulnerability

Powered by SC Magazine
 

Fix for Trojan not mentioned in release notes.

Analysts at Sophos say that they have discovered a stealth patch to Apple's anti-malware software that has not been mentioned in the security notes accompanying its release this week.

After analysing the patch the researchers found an update to the XProtect.plist file in OSX, which includes malware signatures, which will block the HellRTS trojan first seen in the wild in April. The Trojan masquerades as iPhoto but gives an attacker control the infected system, allowing it to be used to send spam and take part in distributed denial of service attacks.

“Unfortunately, many Mac users seem oblivious to security threats which can run on their computers. And that isn't helped when Apple issues an anti-malware security update like this by stealth, rather than informing the public what it has done," blogged Graham Cluley, senior technology consultant at Sophos.

“You have to wonder whether their keeping quiet about an anti-malware security update like this was for marketing reasons. "Shh! Don't tell folks that we have to protect against malware on Mac OS X!"

Compared to the PC platform the amount of malware for Apple systems is tiny at present, but experts are warning that Apple users are complacent about security and that seems to be reflected in the advice staff are giving customers at Apple stores.

“Overheard in Apple store: “Macs never get viruses, it's impossible, don't even worry about it.” Mmmm unwise.” tweeted Ian Whalley, former Sophos employee.

Copyright ©v3.co.uk


Apple adds stealth patch to fix Trojan vulnerability
 
 
 
Top Stories
Photos: Microsoft's new Surface 3 tablet
Microsoft has pared down the specs in favour of portability.
 
Is your lawyer smarter than IBM's Watson?
Sparke Helmore CIO Peter Campbell expects machine learning to take a chunk out of law firm profits. But he’s far from downcast.
 
Australia passes data retention into law
Mammoth last-ditch effort by Greens, indies knocked back.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Do you support the Government's data retention scheme?

   |   View results
Yes
  9%
 
No
  91%
TOTAL VOTES: 1395

Vote