Apple adds stealth patch to fix Trojan vulnerability

Powered by SC Magazine
 

Fix for Trojan not mentioned in release notes.

Analysts at Sophos say that they have discovered a stealth patch to Apple's anti-malware software that has not been mentioned in the security notes accompanying its release this week.

After analysing the patch the researchers found an update to the XProtect.plist file in OSX, which includes malware signatures, which will block the HellRTS trojan first seen in the wild in April. The Trojan masquerades as iPhoto but gives an attacker control the infected system, allowing it to be used to send spam and take part in distributed denial of service attacks.

“Unfortunately, many Mac users seem oblivious to security threats which can run on their computers. And that isn't helped when Apple issues an anti-malware security update like this by stealth, rather than informing the public what it has done," blogged Graham Cluley, senior technology consultant at Sophos.

“You have to wonder whether their keeping quiet about an anti-malware security update like this was for marketing reasons. "Shh! Don't tell folks that we have to protect against malware on Mac OS X!"

Compared to the PC platform the amount of malware for Apple systems is tiny at present, but experts are warning that Apple users are complacent about security and that seems to be reflected in the advice staff are giving customers at Apple stores.

“Overheard in Apple store: “Macs never get viruses, it's impossible, don't even worry about it.” Mmmm unwise.” tweeted Ian Whalley, former Sophos employee.

Copyright ©v3.co.uk


Apple adds stealth patch to fix Trojan vulnerability
 
 
 
Top Stories
Business-focused Windows 10 brings back the Start menu
Microsoft skips 9 for the "greatest enterprise platform ever".
 
Feeling Shellshocked?
Stay up to date with patching for the Bash bug.
 
Amazon forced to reboot EC2 to patch Xen bug
Rolling restarts over next week.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Which is the most prevalent cyber attack method your organisation faces?




   |   View results
Phishing and social engineering
  66%
 
Advanced persistent threats
  4%
 
Unpatched or unsupported software vulnerabilities
  11%
 
Denial of service attacks
  6%
 
Insider threats
  12%
TOTAL VOTES: 1366

Vote