AAPL Stock: 118.88 ( + 1.13 )

Printed from

Mac trojan expands to affect Photoshop CS4

updated 10:50 am EST, Mon January 26, 2009

Mac trojan hits Photoshop

A second Mac trojan is being spread through pirated software, Intego warns. Following the discovery of a trojan linked with copies of iWork '09, the security firm says it has now found a variant, attached to pirated versions of Photoshop CS4. OSX.Trojan.iServices.B also grants a remote user root access; the new trojan is associated with the crack application however, and is spawned under a different name whenever the crack is run.

If a user is tricked into entering his administrator password, executables are also copied to fake user and system DivX folders. At this stage the trojan will begin listening on a random TCP port, and making regular connections to two different IP addresses.

The infected version of Photoshop is said to have been downloaded approximately 5,000 times already, and is once again described as an "extremely serious" threat, best avoided by either avoiding pirated copies of Photoshop or updating virus definitions. Active malware remains rare in the Mac world; the iServices variants are in fact believed to be two of the earliest confirmed trojans.

by MacNN Staff



  1. gskibum3

    Joined: Dec 1969



    One could simply not download from bittorrent sites or LimeWire, the equivalent of buying medicine from the people hanging out in the alley behind Walgreen's, instead of having your prescription filled inside the store.

  1. Athens

    Joined: Dec 1969


    must be slow

    Im starting to wonder if they are the ones introducing these trojans for some "businesses"

  1. Feathers

    Joined: Dec 1969


    repeat after me...

    repeat: A trojan is not a virus, a trojan is not a virus... A trojan, by definition, requires action by the (stupid) user where a virus can go scuttling off on it's own sweet way. Frankly, anyone who gets taken-in by a trojan (or a fake e-mail) deserves what they get, particularly if they have an eye-patch and a parrot on their shoulder!

  1. Guest

    Joined: Dec 1969


    Brand new !

    Pirated software contains trojan.

  1. myramoki

    Joined: Dec 1969


    Thank you!

    Thank you virus checker guys for helping me to steal software. I was becoming a little worried that I might suffer some consequences. And thank you Macnn for letting me know that the virus checkers are helping to make my stealing stuff a trojan free experience! What is the world coming to when I can't steal something and not suffer for it?

  1. OS2Guy

    Joined: Dec 1969


    Intego Desperation Sale!

    They are at it again - suddenly 5,000 Mac users, yesterday it was 20,000 Mac users and yet PB, MN and BTJunkie's downloaders say "nothing here". Selling anti-virus software to the Mac community is a very lonely business. Obviously Intego needs to scare up some sales. And MacNN is helping them out! Hooey - it is all Hooey.

  1. ericdano

    Joined: Dec 1969



    Honestly, I've downloaded the iWork that they speak of. Two different torrents. This Trojan was not on either.

    I think they are making it up.

  1. ViktorCode

    Joined: Dec 1969


    Intego's job

    How it is convenient that the same company who warned us of this "serious threat" coincidentally has something to protect our macs with, right?

  1. heavyboots

    Joined: Dec 1969


    Shocking Development...

    Gee, using stolen software from some random download location could have consequences. Who knew?!?

  1. circus

    Joined: Dec 1969


    this just in

    Intego recommends that all pirates illegally download a copy their virus software for there own protection.

    Intego wants to scare the non-pirates into buying a copy because they now have sourced out a legitimate threat.

    Intelligence will always supersedes virus protection.

Login Here

Not a member of the MacNN forums? Register now for free.


Network Headlines

Follow us on Facebook


Most Popular


Recent Reviews

Ultimate Ears Megaboom Bluetooth Speaker

Ultimate Ears (now owned by Logitech) has found great success in the marketplace with its "Boom" series of Bluetooth speakers, a mod ...

Kinivo URBN Premium Bluetooth Headphones

We love music, and we're willing to bet that you do, too. If you're like us, you probably spend a good portion of your time wearing ...

Jamstik+ MIDI Controller

For a long time the MIDI world has been dominated by keyboard-inspired controllers. Times are changing however, and we are slowly star ...


Most Commented