Apple adds stealth patch to fix Trojan vulnerability

Powered by SC Magazine
 

Fix for Trojan not mentioned in release notes.

Analysts at Sophos say that they have discovered a stealth patch to Apple's anti-malware software that has not been mentioned in the security notes accompanying its release this week.

After analysing the patch the researchers found an update to the XProtect.plist file in OSX, which includes malware signatures, which will block the HellRTS trojan first seen in the wild in April. The Trojan masquerades as iPhoto but gives an attacker control the infected system, allowing it to be used to send spam and take part in distributed denial of service attacks.

“Unfortunately, many Mac users seem oblivious to security threats which can run on their computers. And that isn't helped when Apple issues an anti-malware security update like this by stealth, rather than informing the public what it has done," blogged Graham Cluley, senior technology consultant at Sophos.

“You have to wonder whether their keeping quiet about an anti-malware security update like this was for marketing reasons. "Shh! Don't tell folks that we have to protect against malware on Mac OS X!"

Compared to the PC platform the amount of malware for Apple systems is tiny at present, but experts are warning that Apple users are complacent about security and that seems to be reflected in the advice staff are giving customers at Apple stores.

“Overheard in Apple store: “Macs never get viruses, it's impossible, don't even worry about it.” Mmmm unwise.” tweeted Ian Whalley, former Sophos employee.

Copyright ©v3.co.uk


Apple adds stealth patch to fix Trojan vulnerability
 
 
 
Top Stories
Content, cost & constant innovation: How Foxtel plans to take on Netflix
Nell Payne inhabits the “brave new world of blue strings and networking”. Just don't ask her to put a TV screen on your microwave.
 
Sending in the drones
Margins are getting tighter in the industrial services industry, so Transfield Services' Stephen Phillips looks offshore - and to the skies - for the solutions he needs to keep pace.
 
Westpac fires starting pistol on core banking upgrade
St George readies itself for move to Celeriti.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Should Optus make a bid for iiNet?

   |   View results
Yes
  43%
 
No
  57%
TOTAL VOTES: 532

Vote