SecureMac discovers Trojan horse targeted at Mac OS X

June 21, 2008

SecureMac discovers Trojan horse targeted at Mac OS XSecureMac claims to have discovered several variants of a Trojan horse in the wilderness-oriented users of Mac OS X 10.4 and 10.5. The trojan is being distributed from a hacker Web site through iChat and LimeWire, the company said.

Distributed compiled as an AppleScript called ASthtv05 or as an application, the Trojan allows remote access to the system and can transmit the system and user passwords. SecureMac also said that the Trojan is also capable of logging keystrokes and turning on file sharing.

The Trojan horse exploits a vulnerability with Apple Remote Desktop that allows it to run as root. You have to download and open the file infected by this Trojan to become active, but once it is activated, it adds itself to the system items.

SecureMac said his product, MacScan has been updated to remove this Trojan.

Comments

Got something to say?