Fake Codec is Mac OS X Trojan

Kenny A. writes "Multiple news organisations are reporting on an in-the-wild Mac OS X malware attack that uses porn lures to plant phishing Trojans on Mac machines. The attack site attempts to trick users into download a disk image (.dmg) file disguised as a codec that's required for viewing the video. If the Mac machine's browser is set to to open 'Safe' files after downloading, the .dmg gets mounted and the Installer is launched. The target must click through a series of screens to become infected but once the Trojan is installed, it has full control of the machine."

Comments

fanboys unite

[Pliep]

I've seen this story on several Apple/Mac related news sites yet, and the majority of the comments consisted of Apple apologists telling each other "nothing to worry about, because you still have to enter your admin password".

I wonder if the /. crowd will be any different.

ObObi

[McDutchie]

I feel a great disturbance in the Reality Distortion Field. As if millions of Mac Fanboys cried out in terror, and were suddenly silenced.

Re:You get what you deserve.

[kuzb]

You mean, like all the people who couldn't be stupid enough to open unknown email attachments on their Windows boxes? Then later bought Macs because Macs "don't have those kinds of problems"?

This is GREAT News!

[fm6]

First, came the news that Mac sales has risen by 2/3 from last year, so that one in 12 new PCs sold in the U.S. is now a Mac. Now the user base of the Mac platform has risen to the point where it's worth developing malware for it! If malware developers are taking notice, legitimate application developers can't be far behind. Rejoice, Mac fanatics: you're finally a mainstream platform!

Fan boys are HILLARIOUS

[curtHendzell]

It's good to see there's some flame bait for the Mac fanboys on slashdot to chew on for a while. It's hillarious to see the responses: "They would have to download a .dmg file, mount it, install the app, and then give the admin password. Who does that?" as if this is some HUGE hurdle to jump over to get infected. You might as well say in order to get infected on a Windows box, first you actually have to PLUG IN your ethernet cable, or even connect to a wireless network. Then you have to actually TURN THE MACHINE ON! Is it so unreasonable to expect that with the Mac user base a) growing and b)consisting for the most part of people who don't want to have to worry about malware that most of these users wouldn't think twice about having to go through these steps? I just hope they stop with the no-viruses-on-mac ads soon, as their bluff will soon be called.