ICT Security-Sécurité PC et Internet

A new Trojan dubbed 'OSX/Crisis' has been discovered which takes sneaky to a whole new level for infecting Mac OS X systems.

 

Andrew, director of security operations for nCircle, declared, “Mac malware is no joke. Despite Apple’s marketing hype about security, it should be obvious to everyone that their devices are susceptible to malware. Earlier this year the Flashback Trojan infected hundreds of thousands of Macs. The new OSX/Crisis malware is another Apple wake up call.”

 

For many Mac users, though, there is still a disconnect between realizing that the threat landscape has shifted, and actually doing something about it.

 

===> Mac users need to embrace the mindset that has been conditioned into Windows users over time, and install antimalware and other security tools to proactively protect against new attacks. <===

 

 

 ===> “Mac users are going to have to learn to be more security minded and Apple needs to step up and offer users practical, effective security support.” <===

 

Read more, a MUST:

http://www.pcworld.com/businesscenter/article/259963/mac_os_x_targeted_by_clever_new_trojan.html#tk.rss_main

 

 

Selon Symantec, les auteurs du malware Flashback ont pu gagner jusqu'à 10 000 $ par jour au plus fort de l'infection, qui a touché environ 1 % des Mac en circulation.

 

 

 

===> Un business lucratif qui explique pourquoi, sa popularité aidant, le Mac est lui aussi devenu une proie pour les hackers. <===

 

 

With the recent glut of high profile Mac-based malware like MacDefender and Flashback, it’s easy to forget that Macintosh computers (and Mac malware) have been kicking around for more than thirty years – longer, even, than Windows malware.

 

In fact, the first documented Mac virus actually predated some of the first PC viruses by a good four years. While conventional wisdom has always assumed that Macs are inherently safer than PCs, wider adoption of Macs in recent years has given rise to new and more sophisticated threats, with many suggesting that Apple’s honeymoon with malware authors may be over.

 

As this slideshow of Mac Malware through the years shows, however, Apple machines are no strangers to malicious software.

 

Read more and don't forget "Nobody is perfect ;)"...

 

New details about the extent of the Mac-specific Flashback malware epidemic emerged today.

At least two security firms that estimated a significant drop in Mac systems infected with the datastealing Flashback trojan admit they made erroneous calls.

 

The company said its ===> count may have been distorted because a third-party sinkhole that used a “tarpitting” technique to prevent the malware from attempting to connect to subsequent domains, such as the one set up by Symantec to tally the number of infected Macs, Liam O Murchu, director of operations at the company's Security Response Center, said in an email Monday to SCMagazine.com. <===

 

Read more...

 

 

A new Mac Trojan - dubbed Crisis or Morcut - has been spotted but, luckily, not in the wild.

 

Security firms Intego and Sophos have picked up samples from Virus Total, which shares the samples submitted to it with AV developers, and the fact that it could be found only there shows that the threat is extremely low risk.

 

Nevertheless, the malware itself is far from harmless.

It can compromise the last two version of Apple's OS X (10.6 and 10.7) and it doesn't require a password to be entered to do it.

 

Read more:

http://www.net-security.org/malware_news.php?id=2197&amp;amp;utm_source=dlvr.it&amp;amp;utm_medium=twitter

 

Microsoft has detected a new piece of malware targeting Apple OS X computers that exploits a vulnerability in the Office productivity suite patched nearly three years ago.

 

Microsoft advised those who use Microsoft Office 2004 or 2008 for Mac or the Open XML File Format Converter for Mac to ensure those products have applied the patch.

 

===> "In conclusion, we can see that Mac OS X is not safe from malware," Oh wrote. "Statistically speaking, as this operating system gains in consumer usage, attacks on the platform will increase." <===

 

Read more...

 

 

Fresher students at University of Iowa lately were unable to access the other UI computers when the Flashback virus reportedly infected the campus network.

According to fresh warnings by security vendor Intego, another Java vulnerability is attacking Macs that haven’t been patched with Apple’s Java for OS X Lion 2012-002 and Java for Mac OS X 10.6 Update 7, released earlier this month.

 

Meanwhile, the security analysts warned that many copies of older versions of MS Word haven’t been patched and are being infected.

 

The Word vulnerability was patched by Microsoft several years ago, however, many Mac users haven’t bothered to install the patches or have turned off the automated Microsoft updates installer. According to Integro, MS Word 2004 and 2008 are vulnerable, but Word 2011 is not. In addition, the older .DOC format is vulnerable, not the .DOCX format.

 

Read more...

 

 

The massive Flashback botnet of Mac machines relied on hacked and malware-rigged WordPress blog sites to spread and infect users, according to Kaspersky Lab researchers.

 

Flashback Slashed
We now know where the infection originated, and we have a number of removal tools available to get rid of the infection. But there is some disagreement on exactly how many Macs are still infected with Flashback, nearly two weeks later. Kaspersky researchers said a little over 30,000 Macs are still infected, as of Apr. 19. The biggest drop in the infections came after Apple released its final Java update to patch the flaw and remove the malware, according to Kaspersky Lab.

 

On the other hand, Symantec researchers claimed there were still 140,000 infected machines.

"The statistics from our sinkhole are showing declining numbers on a daily basis. However, we had originally believed that we would have seen a greater decline in infections at this point in time, but this has proven not to be the case," Symantec said.

 

Read more...