False installer Apple iWork`09-threat for the owners of Makov
February 1, 2009, 8:40 am
The company Symantec warned of the existence of a Trojan horse in pirated copies of Apple iWork`09. Malicious code is distributed in the network BitTorrent. Issued for a copy of a test version of Apple iWork`09, iWork 09 fake installer is the file name iWork09. zip - so that users can easily take him for a legitimate version of Apple. In fact, the real version of iWork 09, supplied by Apple, called iWork09Trial. dmg. Troyanizirovanny package contains some fragments of the trial version of iWork 09, as well as the malicious installer iWorkServices. pkg. The threat of OSX. iWork is capable of infecting Mac malicious computer code, which establishes a link with a remote system. This allows the pirates in the infected machine to send commands to the search of confidential or valuable information, monitoring of user behavior on the Internet, and recruited them to write the text. As a result, unsuspecting Mac owner can become a victim of fraud and suffer damage. In my blog Security Response Symantec explains how to set up this threat:When software developers create the installer for the Mac, it often consists of several mini-installers or packages that run in sequence. Each package file (. Pkg) contains a special code and a script that guarantees to place this code in your part of the hard disk, the computer can work with him. In this case, the main installation script changed to not only comply with the correct software packages, and install an additional package, called ahead iWorkServices. pkg, which unloads malicious code that connects the user with a remote system - making it vulnerable to attacks. Symantec Security Response evaluates OSX. iWork as a low-level threat, but stresses that in the current economic crisis, more people may turn to pirate software, not to pay for it. According to Symantec, particularly alarming is that if users do not have any security software, they may never learn that their Mac is infected, as are components of iWork working normally.
