Beware Of Mac Malware Attacks and Trojans

With the release of the new OS 10.6 (now 10.6.1) There was never any doubt that hackers would try to reap benefits of the upgrade and new user community. Many people (no, not me) will or have undoubtedly looked or tried to get a free copy of the new operating system.  BEWARE!

"Information Week reports, there are web sites claiming to offer free copies of Macintosh OS 10.6, but they are actually trying to hack your computer.

With regard to security, Trend Micro said that one its researchers had discovered several Web sites advertising free copies of Snow Leopard. What's actually offered is malware, specifically, a DNS changing Trojan known as OSX_JAHLAV.K.

"Once executed, OSX_JAHLAV.K decrypts codes, which include a script that downloads other malicious scripts," said Trend Micro's Bernadette Irinco in a blog post. "The said script then alters the DNS configuration and includes two additional IPaddresses in its DNS server. Users are thus possibly redirected to phishing sites and other fraudulent sites. In fact, some of these bogus sites are reportedly hosting FAKEAV (rogue antivirus) variants and components."

According to Trend Micro, OSX_JAHLAV.K may be downloaded without the user's knowledge following a visit to a malicious Web site. The Trojan, however, has a "low" overall risk rating. From Information Week.

Remember that there are no free copies of Mac OS X Snow Leopard, or Microsoft 7 for that matter.

Related articles by Zemanta

• Malware served up based on operating system (inquisitr.com)
• Lark Antispyware is free, but sometimes getting what you pay for is a bad thing (downloadsquad.com)
• Snow Leopard packing antivirus software? (engadget.com)

Your Facebook Applications Are Attacking Your Computer

I've written about hacked Facebook accounts on several occasions. Typically the hacker compromises the user account. Now due to Adobe security vulnerabilities many are getting caught on the wrong side of the tracks when it comes to internet and computer security.

Hacked Facebook accounts are not unusual but Roger Thompson, chief research officer at AVG, says "this is the first time I've seen Facebook applications hacked," and said the firm traced back several Facebook applications that had been hacked, to a Russian site which appears to be taking advantage of the compromised Facebook applications to launch attacks against victims' computers based on unpatched Adobe software vulnerabilities.


Several Facebook apps seem to be vulnerable to the unpatched Adobe software hack. the first encounter was with the application CityFireDepartment. In addition to CityFireDepartment, which AVG is cautioning Facebook users not to visit until "it's cleaned up," Thompson says. Other compromised Facebook applications also include MyGirlySpace, Ferraritone, Mashpro, Mynameis, Pass-it-on, Fillinthe and Aquariumlife.


If your computer does not have the Adobe patch to plug the exploit, and you are using one of these applications, then, it's installing the exploit, initially rogue antispyware but probably also a Trojan," Thompson says. AVG has informed Facebook directly about AVG's findings but he noted it's not simple to identify who maintains each of the Facebook applications.

Thompson has chronicled AVG's findings in a blog item. The attack site, which appears to be in Russia, may also be associated with several other Web-based attacks, he adds.

Original story - www.networkworld.com/nwlookup.jsp?rid=188832

See this post, Save Yourself, Update Your Adobe Acrobat Software! 
to read about the Adobe hacks and how to avoid the attacks.  



The bottom line is;
The Adobe support site is "a little bit" confusing to navigate and determine the right update for your computer and operating system, But... the easiest way to upgrade your copy of Acrobat or Acrobat Reader is to launch the program, Click on the "Help" pull down, and choose "Check for Updates".

Subscribe to RSS Feed

Related articles by Zemanta

• Beware of automated attacks from fake Facebook users (venturebeat.com)
• Adobe Chided For Insecure Acrobat Reader (it.slashdot.org)
• AVG LinkScanner can detect malicious short URLs (news.cnet.com)