140000 Flashback-infected computers remain

Powered by SC Magazine
 

About 75 per cent of Macs freed from botnet slavery.

Despite Apple releasing three security updates to vanquish the Flashback trojan, some 140,000 machines remain infected with the data-stealing malware, according to estimates from security firm Symantec.

Symantec, which "sinkholed" the botnet so compromised computers would communicate with servers under its control, said in a blog post Tuesday that it expected the numbers to have diminished more by now, considering Apple released a detection and removal capability as part of its latest update to Java for Mac OS X.

Still, the botnet's size has declined by close to 75 percent in a short stretch of time, from an initial high of some 600,000 nodes on April 9.

Symantec's most-recent analysis also turned up another interesting tidbit regarding the trojan, which so far doesn't seem to be performing any information-stealing actions. Researchers found that it can receive updated information via Twitter about which command-and-control servers to contact for additional instructions.

This is accomplished "by searching for specific hashtags generated by the [Flashback] hashtag algorithm," according to the post. But this wouldn't be the first time Twitter has been used to send botnet commands.

Despite the hoopla surrounding the large infection rate, Apple's slowness to patch and many users' unwillingness to install anti-virus protection, some experts prefer to keep the Mac threat in perspective, considering the platform's market share hovers just above 10 percent.

“As the Mac becomes an increasingly popular computing platform, we will naturally see an increase in attacks geared toward the OS X platform," said Michael Sutton, vice president of security research at Zscaler. "That said, today, Mac OS X targets remain a small sliver of total malware currently in the wild."

This article originally appeared at scmagazineus.com

Copyright © SC Magazine, US edition


140000 Flashback-infected computers remain
 
 
 
Top Stories
Meet FABACUS, Westpac's first computer
GE225 operators celebrate gold anniversary.
 
NSW Govt gets ready to throw out the floppy disks
[Opinion] Dominic Perrottet says its time for government to catch up.
 
iiNet facing new copyright battle with Hollywood
Fighting to protect customer details.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
In which area is your IT shop hiring the most staff?




   |   View results
IT security and risk
  26%
 
Sourcing and strategy
  12%
 
IT infrastructure (servers, storage, networking)
  21%
 
End user computing (desktops, mobiles, apps)
  15%
 
Software development
  26%
TOTAL VOTES: 335

Vote
Would your InfoSec team be prepared to share threat data with the Australian Government?

   |   View results
Yes
  57%
 
No
  43%
TOTAL VOTES: 139

Vote