OSX Trojan On The Loose

[Kent Pribbernow]

http://maccentral.macworld.com/news/2004/04/08/trojan/

Well this should finally put the myth of OSX security to rest. The very first (and likely not the last) major Trojan horse has made its public debut on the Mac platform.

"Intego told MacCentral today that the code is hidden in the ID3 tag of the MP3 file. The code will only activate when clicked, but once it is, Intego warns the Trojan horse has the potential to delete all of a user's personal files; send an e-mail message containing a copy of itself to other users; and infect other MP3, JPEG, GIF or QuickTime files.

Intego also said that the same technique could be used to infect .jpg or .gif files, although no such cases have been found. Intego has released updated virus definitions to combat the Trojan horse."

What's this? You mean Windows isn't the only platform with security issues? I am shocked! :roll:

[Kent Pribbernow]

http://maccentral.macworld.com/news/2004/04/08/trojan/

Well this should finally put the myth of OSX security to rest. The very first (and likely not the last) major Trojan horse has made its public debut on the Mac platform.

"Intego told MacCentral today that the code is hidden in the ID3 tag of the MP3 file. The code will only activate when clicked, but once it is, Intego warns the Trojan horse has the potential to delete all of a user's personal files; send an e-mail message containing a copy of itself to other users; and infect other MP3, JPEG, GIF or QuickTime files.

Intego also said that the same technique could be used to infect .jpg or .gif files, although no such cases have been found. Intego has released updated virus definitions to combat the Trojan horse."

What's this? You mean Windows isn't the only platform with security issues? I am shocked! :roll:

[entropy1980]

http://groups.google.com/groups?hl=e...hnhof.se#link6

It appears that this is merely a proof of concept virus, it is utterly benign. It was not made with any malicious intent, but to demonstrate one way that OS X could be exploited.
Intego got wind of it and blew it out of proportion, but I suppose it is theoretically possible that future viruses could be modeled on it. However I'm sure that Apple could, even more quickly, release a security update that fixes this.

[Kent Pribbernow]

Oh I have no doubt this story is being grossly blown out of proportion, but I just thought it was rather humorous considering all the ignorant comments I've read from within the Mac community at how "bulletproof" OSX security is.

I've said this many times before, and I'll repeat it again. So long as code is written by human hands there will always be flaws in software. That's a fact, not an opinion. If you wish to live inside a bubble of ignorance, believing your platform is "secure" simply because few exploits have occurred, then you deserve to suffer the consequences.

[entropy1980]

Originally Posted by Kent Pribbernow

I just thought it was rather humorous considering all the ignorant comments I've read from within the Mac community at how "bulletproof" OSX security is.

True but still in 3 years OS X has had only what 1 virus? Not a bad track record. One thing to keep in mind is OS X was built on UNIX which has always been a Network OS, so security is inherent in it. Windows security was an afterthought (ok NT was supposed to be an answer as was 2000 and now XP) but none the less security wasn't a priority. Things like the fact to install anything you have to type your admin password and having ports closed by default make OS X a much tougher cookie to crack out of the box. Windows on the other hand is like donut in Homer Simpson's kitchen just asking to be eaten alive.... hopefully Service Pack 2 will alleviate some of the problems XP has had with security. In the end I don't think it's as much as code exploits as dumb end users most exploits wouldn't be a problem if people just didn't open unknown attachments or unexpected ones anyway!

[ctmagnus]

I've said it before and I'll say it again: If it can be created by humans, it can be hacked/cracked/destroyed by humans.

Anyone want to the next MS OS to be written by an elephant?

[foldedspace]

Hackers are lazy and like computers they can tinker with. Therefore they write malicious code to affect the largest number of computers on a platform they themselves like to use. I like Macs alright, but what's the point of writing a virus/worm/trojan that will only affect 10 percent of the computers out there?

Spyware, on the other hand, seems to install just fine on a Mac...ick.

[Gary Sheynkman]

Im actually glad this happened because Jobs way saying to the hacking world: "please bother to make a virus for our small user base!"

[Kent Pribbernow]

Well my hope is this will infuse a sobering dose of reality into the Mac community, perhaps open a few eyes. The comments and claims I've heard in the past are frankly nauseating. One Mac user told me that he didn't believe an OSX virus were possible because, if it were, we would have seen one by now. Brilliant logic. Yeah, I'll never have a heart attack in my life because it would have happened by now. Yeesh. :roll:

Another person likewise claimed this was equally impossible because, virus writers would have fallen over themselves to be the very first person to write an OSX virus, which would bring them lots of fame. In his own words..."I don't think it can be done".

Such stupidity is dangerous. ukeface:

[Zack Mahdavi]

Yeah, OS X definitely isn't secure-proof....

[Mr. MacinTiger]

Well, this is dangerously close to turning into a Win vs. Mac thread, which I really want to steer clear of in the interests of community wellness :P and because threads like that take place all over the net daily to no ultimate purpose.

That said though...
Kent you are right in theory...We all know that any OS that is coded by human hands can be hacked. And yes, we all know that OS X falls under that as well.
HOWEVER, it seems like on a daily baisis in the office on our Win 2000 machines we are getting hammered by Word and email viruses. Norton is kept VERY busy and trojans and viruses have gotten past it several times resulting in files lost, system downtime, and money for the IT guys we have to hire to bring everything back online. You have to read your email with a VERY cautious and discerning eye, even with Norton running.

At home, I have NEVER had that problem on my Mac...NEVER. That's my reality...Now, am I bulletproof? Nope and I know that, but for myself and millions of other Mac users the hassles of viruses and Trojans, etc. are not something we have to deal with on a day to day basis. Thus far anyway...