Mac computers have been known to be pretty resilient against malware and virus infections, but this is not to say that they are 100% immune and have never been infected before, it’s just that when compared to Windows based computers, there seems to be fewer reports of such instances although when they do occur they do make quite the splash in the news (Mac Defender).
Now it seems that there’s a new trojan and the installer calls itself FlashPlayer complete with the Adobe Flash picture, making it look pretty legit. What the trojan does when a user has been duped into installing the bogus browser plug-in is alter the OS X host file.
New entries redirect Google queries to a server in the Netherlands which displays modified results pages and spawns pop-up windows. For now it seems that the pop-ups are blank but some are thinking that the payload the developer is getting is likely to from pay-per-click advertising, and apart from that it does not appear that the trojan will be performing other malicious activities.
- 2013-05-12: Microsoft Issues Warning Over New Trojan That Hijacks Facebook Accounts
- 2012-05-17: Malware mimics Chrome installer, steals banking information
- 2012-05-03: First Drive-By Malware Sites Discovered for Android
- 2012-04-18: Symantec reports that 140,000 Mac computers are still infected with the Flashback trojan
- 2012-04-16: Sabpab Mac OS X trojan discovered, preys on the same Java vulnerability as Flashback
- 2011-10-26: Mac OS X trojan attacks websites from your computer
- 2011-09-27: OSX/flashback.A malware discovered for Mac
- 2011-02-28: New Trojan infects Mac OS X and Windows
- 2010-11-12: Latest Apple OS X update comprises of nearly half Adobe Flash fixes