[LINK] Apple Mac malware: caught on camera

[Kim Holburn]

http://www.sophos.com/blogs/gc/g/2009/03/25/apple-mac-malware-caught-camera/
> Pob in our analysis labs blogged earlier this week about a new  
> variant of the RSPlug Trojan horse for Mac OS X that he had written  
> protection against.
>
> One of the ways in which the OSX/RSPlug-F Mac Trojan horse is being  
> distributed by hackers is in the form of a poisoned HDTV/DTV program  
> called MacCinema.
>
> As you'll see in this video, visiting a website that gives many of  
> the signs of legitimacy, can lead to you downloading a Trojan horse.  
> Even for the Apple Mac.


http://www.youtube.com/watch?v=RTeSYmQS820

> The video is also available on YouTube.
>
> And don't try and tell me that this couldn't affect Mac OS X users  
> because they would have to enter their administrator username and  
> password to install the package. If they were prepared to download  
> this program from this website, I feel pretty confident that they  
> would enter their administrator details to allow installation too!
>
> Mac users are no different to Windows users in this regard - this is  
> social engineering, plain and simple.
>
> Oh, and Windows users shouldn't feel too smug about this either. If  
> you visit the site on a Windows computer, it will serve up a  
> malicious Windows executable from the Zlob family of malware rather  
> than a Mac OS X Trojan horse.

-- 
Kim Holburn
IT Network & Security Consultant
Ph: +39 06 855 4294  M: +39 3494957443
mailto:kim at holburn.net  aim://kimholburn
skype://kholburn - PGP Public Key on request