<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>The FORWARD project blog &#187; mac</title>
	<atom:link href="http://blogs.ict-forward.eu/forward/tag/mac/feed/" rel="self" type="application/rss+xml" />
	<link>http://blogs.ict-forward.eu/forward</link>
	<description>blogging on emerging and future threats</description>
	<lastBuildDate>Mon, 30 Jan 2012 09:09:17 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.1</generator>
		<item>
		<title>First Mac botnet</title>
		<link>http://blogs.ict-forward.eu/forward/first-mac-botnet/</link>
		<comments>http://blogs.ict-forward.eu/forward/first-mac-botnet/#comments</comments>
		<pubDate>Tue, 28 Apr 2009 13:25:36 +0000</pubDate>
		<dc:creator>gessiou</dc:creator>
				<category><![CDATA[security news]]></category>
		<category><![CDATA[botnet]]></category>
		<category><![CDATA[mac]]></category>

		<guid isPermaLink="false">http://blogs.ict-forward.eu/forward/?p=143</guid>
		<description><![CDATA[Researchers at Symantec found two hidden trojans &#8211; OSX.Iservice and OSX.Iservice.B &#8211; in pirated copies of Apple Computer&#8217;s iWork &#8217;09 and Adobe Photoshop CS4 posted on some P2P networks, which use different techniques to obtain the user’s password and take control of the infected Mac machine. The author of the malware downloaded the original/trial versions [...]]]></description>
			<content:encoded><![CDATA[<p>Researchers at <a href="http://www.symantec.com" target="_blank">Symantec</a> found two hidden trojans &#8211; <a href="http://www.symantec.com/security_response/writeup.jsp?docid=2009-012216-4245-99" target="_blank">OSX.Iservice</a> and <a href="http://www.symantec.com/security_response/writeup.jsp?docid=2009-012620-2836-99" target="_blank">OSX.Iservice.B</a> &#8211; in pirated copies of Apple Computer&#8217;s <a href="http://www.apple.com/iwork/" target="_blank">iWork &#8217;09</a> and <a href="http://www.adobe.com/products/photoshop/photoshop/" target="_blank">Adobe Photoshop CS4</a> posted on some P2P networks, which use different techniques to obtain the user’s password and take control of the infected Mac machine.</p>
<p><span id="more-143"></span>The author of the malware downloaded the original/trial versions of each program and introduced a copy of the malicious binary into the packages.  Users who then downloaded and installed the applications from the torrent download would become infected. It is estimated that so far thousands of people have downloaded the malicious torrent files.</p>
<p>So, Mac users be aware of which files you download and according to Symantec &#8220;Users are advised to install Norton Internet Security for Macintosh&#8221; !!</p>
<p>Sources: <a href="http://blogs.zdnet.com/security/?p=3157&amp;tag=nl.e589" target="_blank">ZDNet</a>, <a href="http://www.theregister.co.uk/2009/04/16/new_ibotnet_analysis/" target="_blank">The Register</a><a href="http://www.symantec.com/norton/theme.jsp?themeid=ibotnet"></a></p>
]]></content:encoded>
			<wfw:commentRss>http://blogs.ict-forward.eu/forward/first-mac-botnet/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>

