Slashdot Mirror

Apple exploit found in the wild... targets Microsoft product running on Apple OS.

From TFA:
An attacker who successfully exploits this vulnerability could take complete control of an affected system.
http://labs.alienvault.com/labs/index.php/2012/ms-office-exploit-that-targets-macos-x-seen-in-the-wild-delivers-mac-control-rat/

Is that an exaggerated statement or does it indicate some kind of privilege escalation bug in OSX?

http://alienvault.com/community

Here is more detail on the attack:

Smartcard access

The rst one is that it creates a new thread with a keylogger routine. The code is very basic, it stores the window name and the keys pressed under a le named MSF5F0.dat on an unencrypted format, example:

Title:Internet Explorer
www.google.es
Title:My Computer

It uses the WIN32 APIs functions [GetKeyState, GetAsyncKeyState, GetForegroundWindow, GetWindowTextA].