The Camino Project has released an update to its self-titled browser for Mac OS X. Version 2.0 adds a tab overview feature that allows users to quickly browse all open tabs in a layout preview. Tabbed browsing has also been improved with drag-and-drop rearranging, a scrollable bar, and a dedicated menu listing all of the open tabs.
The upcoming Snow Leopard update reportedly contains new anti-malware functionality, according to the Mac security company Intego. A number of beta testers have noticed a new warning screen that alerts users to malicious code. A leaked screenshot shows an alert dialog for an RSPlug Trojan contained in a disk image downloaded through Safari.
TrendMicro has spotted another Domain Naming System (DNS) Trojan targeting Mac systems. The malware, known as OSX/Jahlav-D, masquerades as a MacCinema Installer. Users are prompted to update QuickTime Player by downloading a QuickTimeUpdate.dmg file.
A new piece of Mac-targeted malware has entered the wild, say security researchers with ParetoLogic. Dubbed OSX/Jahlav-C, the software is currently associated with a website called PornTube, and is described as a Trojan concealing itself as an ActiveX object needed to run video. The approach is somewhat unusual in that ActiveX is uniquely associated with Windows, and therefore less likely to deceive a Mac user.
Apple has changed its attitude towards viruses and malware on the Mac, claims security firm Intego. Apple last year issued an advice statement admitting that "since no system can be 100 percent immune from every threat, antivirus software may offer additional protection." In announcing more features of Mac OS X Snow Leopard, Intego notes that Apple has taken a more stringent approach, for instance implementing code changes like sandboxing, library randomization and execute disables; each limits the potential damage of an outside threat.
The first known botnet to exploit Mac OS X has been activated, security researchers claim. The network is believed to have been put in place by iServices, a Trojan infection accompanying some pirated versions of iWork '09 and Photoshop CS4. Although downloaded at least 20,000 times by the end of January, the Trojan's payload has remained dormant for some time, in the same manner as many Windows botnets.
Mac owners are unlikely to be affected by the Conficker worm, claims security firm Intego. The worm -- also known as Downadup and Kido -- has already infected a number of Windows computers, and is expected to become active on Wednesday. Though the exact behavior it will exhibit is unknown, researchers are said to believe that it will connect to remote servers to download code, and then become malicious.
A second Mac trojan is being spread through pirated software, Intego warns. Following the discovery of a trojan linked with copies of iWork '09, the security firm says it has now found a variant, attached to pirated versions of Photoshop CS4. OSX.Trojan.iServices.B also grants a remote user root access; the new trojan is associated with the crack application however, and is spawned under a different name whenever the crack is run.
A new Trojan attack has been linked with illegal copies of iWork '09, says Intego. The security firm notes that in some copies of iWork found on BitTorrent sites -- and other pirating venues -- a Trojan dubbed OSX.Trojan.iServices.A is attached, masquerading in the form of a package file called iWorkServices. When the iWork installer is launched, iWorkServices is launched as well; while this may be halted by a request for an administrator password, Intego warns that Mac OS X 10.5.1 and earlier will install the Trojan without further prompting.
Many Mac anti-virus programs waste their time scanning for Windows contaminants. While this may be fine if you need to share files with Windows users, you may not want a program that gobbles up excess memory and processing time just to protect against malware that can never even hurt your own hardware. If you’d rather have an anti-virus app that focuses solely on keeping Macs virus-free, one option is PC Tool’s iAntiVirus.
A third variant of the RSPlug Trojan has appeared online, says security firm Intego. Following in the wake of the RSPlug.D version, Intego notes that another mutant copy called RSPlug.E has appeared. The new Trojan is said to be very similar in scope to D, being mainly found on dubious pornography sites, and equipped with a downloader that installs files from a remote server.
A second piece of Trojan-like malware is currently threatening Macs, say security vendors. OSX.Lamzev.A, also known as OSX.TrojanKit.Malez, allows hackers to install a backdoor on a victim's computer and thereby assume control of it. The software is said not to be a true Trojan, however, as an attacker must already have access to the target Mac to make use of the code.
A new version of an existing Trojan poses a significant threat to Mac users, claims the Intego security firm. Based on RS.Plug.A, the RSPlug.D Trojan is said to find its way onto computers through malicious websites, namely several less scrupulous porn sites. On visiting a particular page a person will be greeted with a "Video ActiveX Object Error," stating that their browser cannot play a particular video; it then asks people to download the ActiveX object in question.
Mac users should be on guard against a fake Mac security tool being distributed online, says the Intego security firm. The program, called MacGuard, claims to scan a computer for "adware, spyware and trojans," and then eliminate them; in reality the app is actually a version of existing Windows malware, which has already infected as many as 30 million people worldwide. The latter assumes control of a person's computer, and displays messages warning about a false infection in an attempt to get users to pay money.
RealNetworks is urging Mac users to upgrade to version 11.0 of its RealPlayer application, due to a potential security exploit. The malware research site Secunia rates the problem as "highly critical," with potential risk of malicious system access and exposure of sensitive information. The vulnerability affects Realplayer v10 and v10.1 for Mac OS X. The company did not issue a patch, but is instead urging users to upgrade to RealPlayer 11.0. The company says there is a problem with Realplayer's ActiveX import method buffer overflow.
Anyone who has used a Windows PC knows that you absolutely must have an anti-virus program or else your computer will likely crash the moment you connect to the Internet. Fortunately, the Mac has remained largely untouched by the variety of malware (viruses, worms, Trojan Horses, and spyware) that plagues PCs. However, with the growing popularity of the Mac, it’s inevitable that more people will start writing malware for the Mac. Although you don’t need an anti-virus program for the Mac just yet, you might feel safer knowing that a free one exists called PC Tools iAntiVirus.
Security software developer PC Tools has just released a beta of iAntiVirus, its first security software for the Mac. The company says iAntiVirus uses less memory and system resources than similar security applications because it ignores Windows viruses and only removes malware intended for the Mac. “Let’s face it, malware is (now) a business,” said Michael Greene, PC Tools Vice President of Product Strategy. He says rapid growth in Mac market share has made the platform a profitable target for organized identity theft.
Though servers offering the software are currently buckling and inaccessible to many users, Firefox 3.0 on Tuesday has made its debut with the Mozilla organization looking to set a record for browser downloads. The major new release of the open source Web browser is available today in approximately 50 languages, and is purportedly three times faster than its predecessor, offering "15,000 improvements" including a smart location bar and malware protection. The new Firefox 3 smart location bar, dubbed "Awesome Bar" by Mozilla, adapts to user entries over time. The Firefox 3 Library archives browsing history, bookmarks, and tags, where they can be searched and organized.
