Mac trojan found hidden in PDF

Mac malware mimick Windows attack handbook.

A Mac OS X trojan was found obfuscated as a PDF file, according to researchers at F-Secure.

A trojan dropper installed a backdoor program which could give attackers full control of Mac systems.

The remote command-and-control (C&C) server used to connect with infected machines was a bare Apache installation, F-Secure found.

The malware embedded PDF tactic was new for Mac malware, according to Sophos senior security adviser Chet Wisniewski.

"The PDF lure is a good trick to get people to install the trojan," he said. "You think you're opening a document, when you're installing malware."

"This exploit could be a one-off, but our suspicion is that the model has been established, and we will see more criminal gang activity," he said.

Windows was still the preferred target of cybercriminals because there were more machines to attack.

This article originally appeared at scmagazineus.com

Copyright © SC Magazine, US edition
Mac trojan found hidden in PDF
Company/Organisation
Technology

What are your thoughts on this article? Add your comment below.

To begin commenting right away, you can log in below or register an account if you don't yet have one. Please read our guidelines on commenting. Offending posts will be removed and your access may be suspended. Abusive or obscene language will not be tolerated. The comments below do not necessarily reflect the views or opinions of SC Magazine, Haymarket Media or its employees.

NOTE: You must be a registered member of SC Magazine to post a comment.

Click here to login | Click here to register
comments powered by Disqus
Sign up to receive SC Magazine email newsletters
   FOLLOW US...
Most Read