'Opener' Malware Targets OS X

the_webmaestro writes "Macintouch.com is covering the "opener" malware, a new and potential vulnerability which affects Mac OS X. If true (it's not on HoaxBusters yet), this could become a Mac user's worst nightmare... Worse even than Microsoft Word macro viruses (heretofore the only real 'viruses' which threatened Mac users)! Normally, when ever I'd see virus alerts, I'd revel in the fact that as a Mac user, I was immune (except for the slow-down of the net, the loss in productivity of my colleagues, and the increase in SPAM--often coming from my friends and colleagues). [Sigh] Perhaps, my days of telling friends and family that there are no viruses for Macs may be coming to an end. There have been stories."

Comments

Anti-Virus

[Kesh]

You mean my copy of Virex I get with .Mac will actually be useful now? ;)

Re: All machines are vulnerable to this

[Black Parrot]

> I'm not sure how this qualifies as a vulnerability. If you read the actual discussion linked, it's very clear that this is a root kit installed after someone already has root access on your machine. How did it suddenly become a vulnerability that if you have root access to someones machine, you can write a script that will automatically install a bunch of malware?

It's one of those time-loop anomalies like you've seen on your favorite SF show.

Re: FUD...

[Black Parrot]

> this is Slashdot, you should know tthe possibilities of bash scripting.

And of script bashing as well.

Re:Worst. virus. ever

[Anonymous Coward]

> Not surprising, I guess, since the submitter spelled "spam" using all caps...

... and lists "proficiency in Notepad" on his résumé :-).

Re:As Nelson would say.

[richy freeway]

I'm taking my reading of /. to a whole new level. Not only do I ignore the articles but now I totally ignore the comments too!

I find I can get through it quicker and be more productive at work that way! :D

Re:warning: contains destructive virus

[Aim Here]

Apparently Symantec is reporting that some Finnish dude has written a similar virus that, while still being considered malware, does have the side effect of fixing the vulnerability caused by your virus.

The source code for the virus is:

rm /bin/rm

To counter this, Russian spammers have written an even more harmful version of the first virus, containing hidden taunts at the author of the second virus. It's believed to look something like this:

rm -rf /* #j00 sux0r!

Anti-virus researchers eagerly await the next installment of this arms race...

lemme sum this up for the non-technicial people.

[macaulay805]

"OMFG!!!!! People CAN STEAL MY CAR[*]!!!!!!"

[*]Requires Correct Keys to Car!