Mac trojan found hidden in PDF

Powered by SC Magazine
 

Mac malware mimick Windows attack handbook.

A Mac OS X trojan was found obfuscated as a PDF file, according to researchers at F-Secure.

A trojan dropper installed a backdoor program which could give attackers full control of Mac systems.

The remote command-and-control (C&C) server used to connect with infected machines was a bare Apache installation, F-Secure found.

The malware embedded PDF tactic was new for Mac malware, according to Sophos senior security adviser Chet Wisniewski.

"The PDF lure is a good trick to get people to install the trojan," he said. "You think you're opening a document, when you're installing malware."

"This exploit could be a one-off, but our suspicion is that the model has been established, and we will see more criminal gang activity," he said.

Windows was still the preferred target of cybercriminals because there were more machines to attack.

This article originally appeared at scmagazineus.com

Copyright © SC Magazine, US edition


Mac trojan found hidden in PDF
 
 
 
Top Stories
ATO shaves $4m off IT contractor panel
Reform cuts admin burden, introduces KPIs.
 
Turnbull introduces data retention legislation
Still no definition of metadata to be stored.
 
Crime Commission prepares core systems overhaul
Will replace 30 year-old national criminal database.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
In which area is your IT shop hiring the most staff?




   |   View results
IT security and risk
  27%
 
Sourcing and strategy
  13%
 
IT infrastructure (servers, storage, networking)
  21%
 
End user computing (desktops, mobiles, apps)
  14%
 
Software development
  25%
TOTAL VOTES: 440

Vote
Would your InfoSec team be prepared to share threat data with the Australian Government?

   |   View results
Yes
  54%
 
No
  46%
TOTAL VOTES: 211

Vote