Several pornography
sites are
loading a Trojan disguised as a video codec required to view content on Macs
- the first Mac-targeted malware exploit to be spotted in the wild and
validation of security researchers' long-maintained prediction that, sooner or
later, the rationale for Mac security smugness would rub off. Symantec
Security Response has also
confirmed this, and added detection for the threat as OSX.RSPlug.A.
The Trojan uses a sophisticated method, via the scutil command, to change the
Mac's DNS server. When the new, malicious DNS server is active, it hijacks some
Web requests, leading users to phishing Web sites that are after account
information for sites such as eBay, PayPal and some banks, or simply to pages
displaying ads for other porn sites.
Well, it appears that the Mac is becoming popular enough that the 'bad guys'
think it is worth spending time and effort in developing malware for the Mac OS.
In other news,
there is a flaw in the hard drives that ship with certain Macbooks. The flaw
could result in people losing data unexpectedly: "Retrodata is asserting that
they have seen many failures in a particular line of Seagate SATA laptop drives,
which appear in many apple products such as MacBooks or Mac Minis. The flaw is
eerily similar to the IBM Deathstar sagas of years past when the drives heads
would crash into the disk itself. They list two models in particular, ST96812AS
and ST98823AS, as being affected."