updated 10:50 am EST, Mon January 26, 2009
Mac trojan hits Photoshop
A second Mac trojan is being spread through pirated software, Intego warns. Following the discovery of a trojan linked with copies of iWork '09, the security firm says it has now found a variant, attached to pirated versions of Photoshop CS4. OSX.Trojan.iServices.B also grants a remote user root access; the new trojan is associated with the crack application however, and is spawned under a different name whenever the crack is run.
If a user is tricked into entering his administrator password, executables are also copied to fake user and system DivX folders. At this stage the trojan will begin listening on a random TCP port, and making regular connections to two different IP addresses.
The infected version of Photoshop is said to have been downloaded approximately 5,000 times already, and is once again described as an "extremely serious" threat, best avoided by either avoiding pirated copies of Photoshop or updating virus definitions. Active malware remains rare in the Mac world; the iServices variants are in fact believed to be two of the earliest confirmed trojans.