Spyware Trojan Hitching Ride on Third-Party Mac Screensavers

[jayfish]

http://arstechnica.com/apple/news/2010/06/spyware-trojan-hitching-ride-on-third-party-mac-screensavers.ars

Mac security firm Intego has issued a warning about a Mac twist on a two-year-old Windows spyware app that sends a variety of potentially sensitive information to external servers. Dubbed "OSX/OpinionSpy," the spyware is installed along with a number of widely available third-party Mac OS X screensaver modules, as well as with at least one shareware tool to strip audio tracks from Flash videos.

OSXOpinionSpy, aka PremierOpinion, claims in some cases to be a tool to help collect browsing habits for "market research," while in other cases it installs without any notification. The application runs in the background with root permissions, opening an HTTP backdoor. It scans any attached volumes, sending encrypted information to a number of servers, and can also examine packets coming and going from an infected Mac, potentially grabbing information from other computers on a local network. Finally, it injects code into running versions of Safari, Firefox and iChat, sending a variety of information—e-mail addresses, iChat message headers and URLs, as well as other data—back to command servers.

When it comes to computer security, the weakest link in the chain is always the person at the keyboard. ...no matter the operating system.

FSH

[WeDidIt]

1. Now that Apple is worth more than Microsoft

The Mac is becoming an increasingly attractive target for hackers etc.

[hobbit709]

2. "But Macs are immune, doncha know"

:sarcasm:

[CreekDog]

3. Get a Mac!

:rofl:

[meegbear]

4. IT'S A LIE!!!1 MACS ARE THE GREATEST MACHINES ON THE FACE OF THE EARTH SINCE THE DAWNING OF TIME!!1!

They're so perfect that it would never ever EVER happen!

This is some jealous Win-doze bullshit user talking shit!

[Demoiselle]

5. So if I'm the weakest link in the chain...what do I do to prevent this?

[jayfish]

7. Be Ever Suspicious.

Only install software from reputable developers like Apple, Adobe, Open Office(Oracle) and Microsoft. Don't open e-mail from people or organizations you did not give your e-mail address to. Keep your detection and removal software up to date.

FSH

[Demoiselle]

10. Thanks! I've been ever suspicious for a long time. I delete emails from strangers.

[Statistical]

11. Trust no-one on the internet.

You shouldn't even trust me telling you to trust no-one.
Too late you are already infected.

Seriously the best things are:
1) install all security updates
2) use a good free anti-virus software
3) be smart. Don't trust software/apps/games from website you don't know/trust.

[G_j]

6. link not working nt

[jayfish]

8. Fixed It For You.

Thanks for the heads-up.

FSH

[donco6]

9. Does anyone still use screensavers?

It's like calling a telemarketer on purpose just to give him your credit card info.

[jayfish]

12. I Still Use After Dark.

Just kidding. You'd be surprised though at how many still use them. It's strictly a personalization thing though as screen savers really aren't necessary these days.

FSH

[Romulox]

15. I use Itunes Coverflow screensaver for OSX

It's pretty damn cool!

[MilesColtrane]

13. "in other cases it installs without any notification.

"The spyware is downloaded and installed by the installers for MishInc FLV To Mp3, as well as a few dozen screensaver modules made by 7art-screensavers."

Well....no other notification than the whole, obvious "DRAG FOLDER TO YOUR HARD DRIVE TO INSTALL".

[Ezlivin]

14. Good thing I've got the iCondom

No nasty diseases for my Mac!