toggle

AAPL Stock: 104.83 ( + 1.84 )

Printed from http://www.macnn.com

New Mac Trojan uncovered: "Boonana"

updated 05:40 pm EDT, Wed October 27, 2010

Hides as a video via social networking, email

SecureMac and Intego, among other security firms, today alerted the Mac community to a new Trojan threat, trojan.osx.boonana.a (Intego gives it the name OSX/Koobface.a), which is spreading via social networking sites like Facebook and e-mail. The trojan appears as a link in messages with the subject "Is this you in this video?", and when users click on the link, a Java applet downloads an installer, which modifies system files to bypass passwords and other protections.

Boonana affects both Mac OS X and Windows, and sets itself up to run invisibly in the background at next startup, allowing outside access to files. It periodicially checks in with servers and spreads itself via further spam messages. Mac users are advised to disable Java on their web browsers and avoid clicking email links that claim to point to videos.

Although this is not the first trojan for the Mac to take advantage of exploits in browser Java, this is a rare instance of one that works on both major platforms simultaneously. SecureMac has released a free removal tool, directly downloaded here.




by MacNN Staff

POST TOOLS:

TAGS :

toggle

Comments

  1. bdmarsh

    Joined: Dec 1969

    0

    already shut down?

    the additional notes from one of the security firms looking into it found that either there was a bug in the code, or the hosting servers for the extra program payloads was down, they could only see the initial worm.

    Maybe this was just a proof of concept test.

  1. patrix

    Joined: Dec 1969

    -1

    Chrome immune?

    I know for a fact that Chrome keeps websites from installing anything, so would it be immune to that?

    Besides, don't you have to click "yes I trust this applet" like a million times to get a Java applet to run.


    As usual, it will be used to scare Mac users, or to show that Macs have viruses, even though, as usual, that will all be blown way out of proportion.

  1. Athens

    Joined: Dec 1969

    +2

    I disagree

    I think this one is of more concern then others because of how its spreading via social network sites. This is one of the few that regular users could end up encountering and because its facebook trust by mistake. Most mac Trojans have been part of illegal warez downloads, little risk to regular average people.

  1. JeffHarris

    Joined: Dec 1969

    +5

    Typical Intego Tactic

    Welcome to Intego's quarterly Mac "virus" scare!

    This is yet another of Intego's FUD spreading cyclical attempts to sell anti-virus software to unsuspecting Mac users (frightened ex-Windows users). They've been doing this for years.

  1. gskibum3

    Joined: Dec 1969

    +3

    Misleading

    Other articles make it clear that a user must supply admin credentials to allow the software to install. Which is contrary to what is suggested by this macnn article.

  1. zjone003

    Joined: Dec 1969

    -5

    hey

    accept paypal and credit card

    ==== http://www.proxy4biz.com ====

    Cheap Nike air Jordan shoes35$,Air Force 1 38$, Nike dunks SB shoe,Nike Shox shoe. Wholesale Cheap Nike shoes with discount jersey, High quality T-shirts,ED hardy t-shirts,ED Hardy hoodies,ED hardy shoes,ED hardy Jeans,Evisu shoes,GUCCI shoes,LV Handbag,Chanel Handbag……welcome to
    ==== http://proxy4biz.com ====

    Nike shox(R4,NZ,OZ,TL1,TL2,TL3) $35

    Handbags(Coach lv fendi d&g) $35

    Tshirts (Polo ,ed hardy,lacoste) $16

    Jean(True Religion,ed hardy,coogi) $30

    Sunglasses(Oakey,coach,gucci,Armaini) $15

    New era cap $12

    Bikini (Ed hardy,polo) $18


    ==== http://www.proxy4biz.com ====

Login Here

Not a member of the MacNN forums? Register now for free.

toggle

Network Headlines

toggle

Most Popular

MacNN Sponsor

Recent Reviews

Sound Blaster Roar Bluetooth speaker

There could very well be a new king of the hill for Bluetooth speakers, with Sound Blaster's recent entry into the marketplace. Bring ...

Kenu Airframe Plus

Simple, stylish and effective, the Kenu Airframe + portable car mount is the latest addition to Kenu's lineup. Released earlier this ...

Plantronics Rig Surround 7.1 headset

Trying to capture the true soundscape of video games can be a daunting task. Looking to surround-sound home theater options, users hav ...

toggle

Most Commented