Does GateKeeper allow the installer to run?
In other words, is the installer code signed by a valid developer certificate?
In that case I think some developer would have just got their developer certificate revoked
Does GateKeeper allow the installer to run?
In other words, is the installer code signed by a valid developer certificate?
So does Apple push these updates automatically? Or what
Firstly, access control, "superuser" and "userland" have existed in computing long before Unix. Secondly UAC is neither useless nor a ripoff. It is similar in implementation to 'sudo' and that's all. You don't innovate on what is proven to work. It's not a competition. Thirdly, nothing is 100% secure.
I'm amazed that an "Amateur Security Researcher" would post such a meaningless statement and then direct people to "Google it duuude" as proof.
Since when do we call phishing scams trojans? The fact that the scam is an application rather than the typical website or e-mail is a very small difference in the nature of it. One must download it, open it, type in their personal information, and accept the result. If that's a trojan, so is mailing a letter that says "Give me $5000."
And people always defended OSX for being virus/spyware free... LOL. Welcome to reality. Hopefully Apple can keep up with the variations that are no doubt going to be roaming out in the wild based on this.
There is another level of security you can easily add. If you contact your cell carrier, they can block any subscriptions being added to your cell phone account. Then, even if you fall for something like described in this thread, it'll still be blocked by the carrier. I use AT&T, and I know they support blocking. I would suspect other carriers could do the same.
the 'for MAC on MAC' is a bit of a giveaway aswell
True, if this was either a virus or spyware. the only difference is that this "Trojan" still requires the user to allow it while other systems can be infected simply by visiting a website.
But as long as Gatekeeper is used to block the apps, then this shouldn't be a problem.
I'm just utterly amazed at how many people on here are throwing around terms like "idiot" and "moron" in regards to trojan malware. The entire concept of a trojan is that it resembles legitimate software (when done "properly", it's EXACTLY IDENTICAL in appearance). Web sites can be hacked and hijacked. Legitimate software can be redirected to trojan versions and the poor souls that happen to download what they believed was the legitimate software from a legitimate web site before it's detected are real victims and they are NOT "morons".
All the people in this thread that think it could NEVER happen to them are like people living in the desert that think their house couldn't possibly be flooded because it hardly ever rains. The sheer amount of ignorance on this subject is simply astounding. You're sitting there behind your keyboards reading about what sounds like someone logging on to "Trojan.com" and purposely downloading a trojan and then installing it. I see lists of things to do that act like Apple's so-called "warning" of "Gee, this program was downloaded off the Internet; you sure you want to run it" is some kind of malware detector? Bullcrap. It says that for trojans and legitimate software alike. Gatekeeper's only function is try and get you to buy all your software from Apple's App store. I guess that's what you all must do since otherwise, you'd be terrified to actually click "OK" after that warning, which you MUST do in order to install ANYTHING (legit or otherwise) off the Internet. Apple's malware detection tools are ONLY useful AFTER they've added the new definition. If you get it before then, tough luck.
But nevermind all the exploits that have been found in things like Java, Flash, Webkit, etc. over the years; yeah you got lucky someone didn't take full advantage of it; but no...it's because you're too smart! Those people MUST have been "morons" or "idiots", right? Yeah, right. It's often the ones who think they couldn't ever fall for something that are particularly vulnerable because they become careless. If an anti-malware program becomes available, they won't bother to install/use it because they think they're too smart for the criminals out there. Yes, I'm sure none of you have ever visited anything but large corporate web sites and your kids have never surfed anywhere but legitimate sites too and no such web site has EVER been hijacked or hacked in the history of the Internet....![]()
![]()
And so you ONLY install certified software and/or Apple App store apps? You sure have a limited selection to pick from.
Very funny! Good nerd humorI thought it was software for the NIC.![]()
I'm just utterly amazed at how many people on here are throwing around terms like "idiot" and "moron" in regards to trojan malware. The entire concept of a trojan is that it resembles legitimate software (when done "properly", it's EXACTLY IDENTICAL in appearance). Web sites can be hacked and hijacked. Legitimate software can be redirected to trojan versions and the poor souls that happen to download what they believed was the legitimate software from a legitimate web site before it's detected are real victims and they are NOT "morons".
All the people in this thread that think it could NEVER happen to them are like people living in the desert that think their house couldn't possibly be flooded because it hardly ever rains. The sheer amount of ignorance on this subject is simply astounding. You're sitting there behind your keyboards reading about what sounds like someone logging on to "Trojan.com" and purposely downloading a trojan and then installing it. I see lists of things to do that act like Apple's so-called "warning" of "Gee, this program was downloaded off the Internet; you sure you want to run it" is some kind of malware detector? Bullcrap. It says that for trojans and legitimate software alike. Gatekeeper's only function is try and get you to buy all your software from Apple's App store. I guess that's what you all must do since otherwise, you'd be terrified to actually click "OK" after that warning, which you MUST do in order to install ANYTHING (legit or otherwise) off the Internet. Apple's malware detection tools are ONLY useful AFTER they've added the new definition. If you get it before then, tough luck.
But nevermind all the exploits that have been found in things like Java, Flash, Webkit, etc. over the years; yeah you got lucky someone didn't take full advantage of it; but no...it's because you're too smart! Those people MUST have been "morons" or "idiots", right? Yeah, right. It's often the ones who think they couldn't ever fall for something that are particularly vulnerable because they become careless. If an anti-malware program becomes available, they won't bother to install/use it because they think they're too smart for the criminals out there. Yes, I'm sure none of you have ever visited anything but large corporate web sites and your kids have never surfed anywhere but legitimate sites too and no such web site has EVER been hijacked or hacked in the history of the Internet....![]()
![]()
And so you ONLY install certified software and/or Apple App store apps? You sure have a limited selection to pick from.
And clearly you have no idea of what a Trojan is ... This kind of virus you have to install by yourself .... Is not OS X the problem: it's the user in front of the screen.And people always defended OSX for being virus/spyware free... LOL. Welcome to reality. Hopefully Apple can keep up with the variations that are no doubt going to be roaming out in the wild based on this.
This isn't a virus or spyware which are installed without user input. This is a Trojan which needs a stupid user to install it.And people always defended OSX for being virus/spyware free... LOL. Welcome to reality. Hopefully Apple can keep up with the variations that are no doubt going to be roaming out in the wild based on this.
You obviously have NO idea what a Trojan or a phishing scam actually is.Since when do we call phishing scams trojans? The fact that the scam is an application rather than the typical website or e-mail is a very small difference in the nature of it. One must download it, open it, type in their personal information, and accept the result. If that's a trojan, so is mailing a letter that says "Give me $5000."
And so you ONLY install certified software and/or Apple App store apps? You sure have a limited selection to pick from.
And people always defended OSX for being virus/spyware free... LOL. Welcome to reality. Hopefully Apple can keep up with the variations that are no doubt going to be roaming out in the wild based on this.
No no no ... the 'processor' has nothing to do with viruses or like in this case lame phishing attempts.
It is only that MacOS has finally reached the critical mass that it is more interesting to target mac os users. This would also happened on PowerPC if it would have been more successful during that time.
But anyway - this is still not a real virus - it requires that user to download something, click the installer, enter the password, click through the warnings, enter the SMS and reply to it (or use it's 'code') ... all user initiated, nothing happens hidden in the background.
In the PowerPC days, viruses and malware in OSX was unheard of. While I agree the move from PPC was a much needed one, the switch to Intel meant trouble ahead for OS X on x86 hardware. Now Apple is getting viruses and malware. Terrible if u ask me.
In the PowerPC days, viruses and malware in OSX was unheard of. While I agree the move from PPC was a much needed one, the switch to Intel meant trouble ahead for OS X on x86 hardware. Now Apple is getting viruses and malware. Terrible if u ask me.