OS X Backdoor Trojan in Beta

[Tonsko]

There are rumours of a new OSX trojan being developed, seemingly based on an old Windows one. Sophos take the opportunity to tell us their (free) av will find it, but meh to that.

Anyway, just a heads up to a new potential threat.

http://www.hackinthebox.net/vulnerabilities/mac-os-x-backdoor-trojan-now-in-beta.html

 

[Hellhammer]

The antivirus software they are advertising is the trojan.

 

[stridemat]

SophosLabs has published protection for our customers as OSX/MusMinim-A. Trojans like this are frequently distributed through pirated software downloads, torrent sites, or anywhere you may download an application expecting to need to install it.

Im not worried. With the Mac App store I shouldn't get any of these side effects. Also, if it was a serious piece of programming surely it would hide on you Mac unannounced, just skimming off your CC details etc.

 

[camomac]

OS X Backdoor Trojan in Beta

(Mod note: some posts merged from another thread.)

Anybody seen this?


http://nakedsecurity.sophos.com/2011/02/26/mac-os-x-backdoor-trojan-now-in-beta/

 

[Mr_Brightside_@]

Bout time I say. I didn't install that virus scanner for no good reason.
That article is also on SOPHOS' website. Just saying.

 

[GGJstudios]

Anybody seen this?


http://nakedsecurity.sophos.com/2011/02/26/mac-os-x-backdoor-trojan-now-in-beta/

It's just Sophos trying to scare people into buying their software. Obviously, it's not even a threat at this point, as it's still being developed. There have been trojans around for a long time, but they require the user to actively download and install them, usually entering their admin password. Some common sense will be all the protection needed for such threats.

Mac Virus/Malware Info​

 

[chrono1081]

It's just Sophos trying to scare people into buying their software. Obviously, it's not even a threat at this point, as it's still being developed. There have been trojans around for a long time, but they require the user to actively download and install them, usually entering their admin password. Some common sense will be all the protection needed for such threats.

Mac Virus/Malware Info​

+1 the only time you ever see mac virus anything is from Sophos.

Also after reading the article I'm calling shenanigans. "I am a virus I infected your Mac" What??? Really? In real life malware does not announce itself. It does its nefarious deeds and tries to stay hidden. Whats in the article looks like bad Hollywood mumbo jumbo.

 

[John T]

There should be a law against Sophos where Macs are concerned! They sell so-called security software and promote it by quoting rubbish to ensnare the gullible and those with little computer knowledge..

 

[munkery]

From Sophos website:

If the server is running on a NAT'd network, the corresponding client component could only connect from the local network.

I bet it requires authentication to install as well.

For those interested, this new trojan is based on DarkComet-RAT.