Mac OSX Trojan Horse Virus Warning
#1
There is a potential Mac OSX Trojan Horse (Virus) that is potentially spread through Bonjour (iChat) messaging. Full details at <a href="http://www.macrumors.com/pages/2006/02/20060216005401.shtml">MacOS Rumors</a> (Link from <a href="http://slashdot.org">Slashdot</a>).<br><br>
It looks like the original incarnation was spread in files pretending to be screenshots of the unreleased MacOSX 10.5 "Leopard". The virus is spread through a messaging program, like iChat, but there is the security feature that iChat will not launch an application (or Unix script) without first asking the user. So be very aware of anyone sending you "images" through your messaging client.<br /><br /><br /><a href="http://www.magelo.com/eq_view_profile.html?num=820004">Nikolai Lianfyrr</a>,<br>
Khati Sha Feral Lord<br>
<SELECT name=NikSkills> <OPTION selected>Nik's Tradeskills:<OPTION>Grand Master Tailor (250)<OPTION>Grand Master Potter (250)<OPTION>Grand Master Brewer (250)<OPTION>Master Smith (238)<OPTION>Master Fletcher (207)<OPTION>Grand Master Fisher (200)<OPTION>Master Jeweler (200)<OPTION>Master Chef (200)</OPTION></SELECT>
Reply

#2
Woo! Another great reason to use Fire which doesn't download images well at all<img src="/forums/images/gpicons/face_wink.gif">.<br /><br /><br />--<BR>
<a href="http://www.magelo.com/eq_view_profile.html?num=881745">Kyth</a>, Officer of Temerity<BR>
Random quote: (<a href="http://www.frivolity.com/eq/eqq/sq.cgi">Click here to view all quotes</a>)<BR>
<img src="http://www.frivolity.com/eq/eqq/q.gif">
Reply

#3
It just pretends to be images (tar-ed and zip-ed ones at that), so Fire may be affected as well, provided it uses Bonjour messaging and can accept .tgz files.<br /><br /><br /><a href="http://www.magelo.com/eq_view_profile.html?num=820004">Nikolai Lianfyrr</a>,<br>
Khati Sha Feral Lord<br>
<SELECT name=NikSkills> <OPTION selected>Nik's Tradeskills:<OPTION>Grand Master Tailor (250)<OPTION>Grand Master Potter (250)<OPTION>Grand Master Brewer (250)<OPTION>Master Smith (238)<OPTION>Master Fletcher (207)<OPTION>Grand Master Fisher (200)<OPTION>Master Jeweler (200)<OPTION>Master Chef (200)</OPTION></SELECT>
Reply

#4
user1 downloads file professing to be an image<br>user1 double clicks 'image' to open it up in preview<br>system asks for admin permission to perform this action<br><br>How many morons would give admin authentication at this point?<br><br><br /><br /><br />-- <a href="http://ctprofiles.net/5239" target="new">Bastette</a> of Medivh<br>-- <a href="http://www.magelo.com/eq_view_profile.html?num=733403&amp;resize=true" target="new">Bastette</a> of Al'Kabor<br>
<form name="bastette"><select name="skills"> <option>Grand Master Chef (250) w/Trophy</option><option>Master Potter (198)</option><option>Master Brewer (187)</option><option>Master Jeweler (183)</option><option>Master Smith (168)</option><option>Master Fletcher (162)</option><option>Master Tailor (160)</option><option>Master Fisher (104)</option></select></form>
Reply

#5
This is why I use Windows.<br /><br /><br />Nihilists! Fuck me. I mean, say what you like about the tenets of National Socialism, Dude, at least it's an ethos.<br>
-Walter<br>
Reply

#6
Bastette said:<center><div class="QuotedForumText" style="width: 90%;text-align: left;"><hr><b>quote:</b><br><br><br><br>How many morons would give admin authentication at this point?<br><br> <hr></div></center><br>

Tons.<br /><br /><br /><font face="Tahoma"><i>"Mars ain't the kind of place to raise your kids"</i> </font>
Reply

#7
hey only if its porn.<br /><br /><br />_______________________________________________<br><br><a href="http://www.magelo.com/eq_view_profile.html?num=768984">Can Dual Wield AND carry a dozen donuts.</a><em>- <br></em><br>Give up that bitter black urine men call coffee. Ahh. Java devil, you are now my bitch.<br>--- <em><strong>The Tick<br></strong></em><br><a href="http://www.thetick.ws/wavs/lep1/comprehend.wav">Tick sound bite</a><br><br><br>
Reply

#8
Actually, the reports are saying that the admin password prompt is not required in some cases.<br /><br /><br /><a href="http://www.magelo.com/eq_view_profile.html?num=820004">Nikolai Lianfyrr</a>,<br>
Khati Sha Feral Lord<br>
<SELECT name=NikSkills> <OPTION selected>Nik's Tradeskills:<OPTION>Grand Master Tailor (250)<OPTION>Grand Master Potter (250)<OPTION>Grand Master Brewer (250)<OPTION>Master Smith (238)<OPTION>Master Fletcher (207)<OPTION>Grand Master Fisher (200)<OPTION>Master Jeweler (200)<OPTION>Master Chef (200)</OPTION></SELECT>
Reply

#9
http://www.ambrosiasw.com/forums/index.p...r><br>This is the best info on it that I've seen.<br><br /><br /><br />-- <a href="http://ctprofiles.net/5239" target="new">Bastette</a> of Medivh<br>-- <a href="http://www.magelo.com/eq_view_profile.html?num=733403&amp;resize=true" target="new">Bastette</a> of Al'Kabor<br>
<form name="bastette"><select name="skills"> <option>Grand Master Chef (250) w/Trophy</option><option>Master Potter (198)</option><option>Master Brewer (187)</option><option>Master Jeweler (183)</option><option>Master Smith (168)</option><option>Master Fletcher (162)</option><option>Master Tailor (160)</option><option>Master Fisher (104)</option></select></form>
Reply

#10
Bastette said:<center><div class="QuotedForumText" style="width: 90%;text-align: left;"><hr><b>quote:</b><br><br>http://www.ambrosiasw.com/forums/index.php?showtopic=102379<br><br>This is the best info on it that I've seen.<br> <hr></div></center><br><br>
Nice info there. Andrew nicknamed the virus "Oompah-Loompah" - Where is that Gnome, anyway?<img src="/forums/images/gpicons/face_wink.gif"><br><br>
A little aside on one of the guys Andrew mentions (along with an indirect mention of the "smartfriends" mailing list) is that he wrote a MacHack hack, called something like "ReadmeDammit" which used a similar methodology as the trojan virus, using OS9's (7? 8? - I can't remember) built-in icon decompression to automatically open a readme file, whenever you simply opened the file's folder. Random trivia rears its head again.<img src="/forums/images/gpicons/face_mischief.gif"><br /><br /><br /><a href="http://www.magelo.com/eq_view_profile.html?num=820004">Nikolai Lianfyrr</a>,<br>
Khati Sha Feral Lord<br>
<SELECT name=NikSkills> <OPTION selected>Nik's Tradeskills:<OPTION>Grand Master Tailor (250)<OPTION>Grand Master Potter (250)<OPTION>Grand Master Brewer (250)<OPTION>Master Smith (238)<OPTION>Master Fletcher (207)<OPTION>Grand Master Fisher (200)<OPTION>Master Jeweler (200)<OPTION>Master Chef (200)</OPTION></SELECT>
Reply

#11
Lianfyrr said:<center><div class="QuotedForumText" style="width: 90%;text-align: left;"><hr><b>quote:</b><br><br>It just pretends to be images (tar-ed and zip-ed ones at that), so Fire may be affected as well, provided it uses Bonjour messaging and can accept .tgz files.<hr></div></center><P>

No, Fire's download file support is just so horribly buggy that I never use it<img src="/forums/images/gpicons/face_wink.gif">.<P>

It's worth it though for the awesome chat interface and features.<P><br /><br /><br />--<BR>
<a href="http://www.magelo.com/eq_view_profile.html?num=881745">Kyth</a>, Officer of Temerity<BR>
Random quote: (<a href="http://www.frivolity.com/eq/eqq/sq.cgi">Click here to view all quotes</a>)<BR>
<img src="http://www.frivolity.com/eq/eqq/q.gif">
Reply

#12
Lianfyrr said:<center><div class="QuotedForumText" style="width: 90%;text-align: left;"><hr><b>quote:</b><br><br>Random trivia rears its head again.<img src="/forums/images/gpicons/face_mischief.gif"><hr></div></center><br><br><br>More random trivia: Ambrosia is based here in Rochester, and Andrew also went to RIT.&nbsp; He was a few years ahead of me.&nbsp; I met him, and was actually in his dorm room once, but didn't have a Mac yet, and was not sufficiently awed...<br><br><br /><br /><br />-- <a href="http://ctprofiles.net/5239" target="new">Bastette</a> of Medivh<br>-- <a href="http://www.magelo.com/eq_view_profile.html?num=733403&amp;resize=true" target="new">Bastette</a> of Al'Kabor<br>
<form name="bastette"><select name="skills"> <option>Grand Master Chef (250) w/Trophy</option><option>Master Potter (198)</option><option>Master Brewer (187)</option><option>Master Jeweler (183)</option><option>Master Smith (168)</option><option>Master Fletcher (162)</option><option>Master Tailor (160)</option><option>Master Fisher (104)</option></select></form>
Reply





Users browsing this thread:
1 Guest(s)

Forum software by © MyBB