Archive for the 'OS X Security' Category

OS X Worm discovered: “Oompa-Loompa” (aka “OSX/Oomp-A”)

Saturday, February 18th, 2006

Full discussion is available at MacInTouch: timely news and tips about the Apple Macintosh

A file called “latestpics.tgz” was posted on a Mac rumors web site http://www.macrumors.com/ , claiming to be pictures of “MacOS X Leopard” (an upcoming version of MacOS X, aka “MacOS X 10.5”). It is actually a Trojan (or arguably, a very non-virulent [...]

Desjardins : Cible d’un Phishing en Français

Friday, February 3rd, 2006

MacBidouille.com : Bidouille hardware sur Mac
[MàJ]2 Après le Crédit Lyonnais, c’est au tour de la banque québécoise Desjardins d’être la cible d’un Phishing en Français.

Worm set to delete data files on February 3

Tuesday, January 24th, 2006

Arstechnica” Worm set to delete data files on February 3

While the most high-profile security vulnerability of late was almost certainly the WMF hole recently patched by Microsoft, in terms of actual numbers of infections it was barely a blip on the radar. According to the anti-virus company F-Secure, one of the most populous and [...]

Nasty OS X Trojan: MacOS/MW2004

Saturday, January 21st, 2006

From NAI - MacOS/MW2004

Risk Assessment : Low

Trojan Information

Discovery Date: 05/13/2004
Origin: Unknown
Length: 104,989 bytes
Type: Trojan
SubType: Macintosh
Minimum DAT: 4362 (05/19/2004)
Updated DAT: 4371 (06/30/2004)
Minimum Engine: 4.2.40
Description Added: 05/13/2004
Description Modified: 05/18/2004 7:02 PM (PT)

Trojan Characteristics:

This trojan was distributed in a file called “Microsoft Word 2004 OSX Web Install”, hence the name. (Note – the name can [...]

macCompanion - Mac Malware Status? By Robert Pritchett

Saturday, January 21st, 2006

From: macCompanion – Your Guide To All Things Macintosh
(...)

We have to be careful about tossing figures around. The figure of 68,736 appears to be from http://securityresponse.symantec.com/avcenter/download.html and, by the way, it’s up to 69,225 as of today (vs. 69,224 yesterday, if you care). But this is from a company, Symantec, which we’re correctly slamming for [...]

Snake Oil Warning Signs:Encryption Software to Avoid

Saturday, December 17th, 2005

Snake Oil Warning Signs:Encryption Software to Avoid

Good cryptography is an excellent and necessary tool for almost anyone. Many good cryptographic products are available commercially, as shareware, or free. However, there are also extremely bad cryptographic products which not only fail to provide security, but also contribute to the many misconceptions and misunderstandings surrounding cryptography and [...]