Shoe Two

Apple's first malware pandemic?

Get It Try It

Complacency and smugness suddenly turn to panic. The Developers Workshop article 'Trojans for Nothing' pointed out how easy the 'iWorkServices' exploit was - and sure enough (and just as Brian Krebs predicted) it's spreading.

Intego Security Alert 26 January

A nearly identical trojan has been found at the torrent sites. The social engineering tack's the same: offer something for nothing. In this case a cracked version of Adobe CS. The attack is the same: embed a trojan inside the Apple installer package, edit a few plain text files, and that's it.

It can't be easier - and considering the circumstances these Maccie users can't be stupider.

iTrojan.clix

iTrojan.clix is a new CLIX command file available for immediate download that takes care of this most recent exploit.

ftp://rixstep.com/iTrojan.clix

The ordinary CLIX downloads have also been augmented with this command file.

See Also
Industry Watch: These Are Not the Trojans You're Looking For
Security Fix: Pirated iWork Software Infects Macs with Trojan Horse
Mack Diesel's Musings: These Are Not the Trojans You're Looking For