Warning!!! Mac iWork Pirates: Trojans Everywhere
Mac security firm Intego announced Thursday on a Trojan horse it spotted hiding in pirated copies of Apple’s iWork `09.
What does the Trojan horse do?
Firstly, Mac installer packages are made-up scripts that install the applications and various files in the correct places on a Mac’s hard drive. Whilst installing iWork `09 , the iWorkServices package is installed, and the installer for the Trojan horse is launched as soon as a user begins the installation of iWork, following the installer’s request of an administrator password.
The Trojan is installed as a startup item in /System/Library/StartupItems/iWorkServices,
where it has installed read-write-execute authorizations for root. The malicious software then connects to a remote server over the Internet and fundamentally holds open a door to the Mac. Read the rest of this entry »