Koobface variant as a trojan for Mac OS X

[Peaches]

28 October 2010, 16:57

Koobface variant as a trojan for Mac OS X

In a blog posting, Mac security software firm Intego reports that a further variant of the Koobface worm is currently being circulated which targets Mac users in form of a trojan masquerading as a Java applet. Koobface (an anagram of Facebook) spreads via social networks such as Facebook, MySpace or Twitter and tricks users into viewing a video ("Is this you in this video?"). While the original version of Koobface masqueraded as an update for Flash Player on the linked page and offered a malicious EXE file to download, the new variant pretends to be a Java applet.

When accessing the alleged video page, an alert will warn the user about the applet's unverified signature – however, if access is granted regardless, the malware will download an installer and further files which eventually deploy malicious software that specifically targets Mac OS X, Windows or Linux.

More details & screenshot … http://www.h-online.com/security/news/item/Koobface-variant-as-a-trojan-for-Mac-OS-X-1126899.html