Koobface turns eyes towards Macs

A version of the Koobface worm, which uses social networks to spread, has been discovered targeting Macs.

Worm

A Mac version of the infamous Koobface worm has been discovered for the first time.

The malware propagates via social networks like Facebook and Twitter, and once installed via a Trojan horse, it implants a rootkit, a backdoor as well as a command and control centre.

Intego's Virus Monitoring Centre had been tracking the Mac version of the worm but did not feel compelled to issue a release about it given the low risk it posed.

The security firm has discovered a number of infections in the wild, although they have not caused any noticeable damage.

"Either the malicious malware has bugs preventing it from running correctly, or the servers it contacts are not active or are not serving the correct files," Intego said.

"While this is an especially malicious piece of malware, the current Mac OS X implementation is flawed and the threat is therefore low."

Koobface attackers use social engineering tricks to get users to click on a link, which will direct the target to a malicious website that will then try to load a Java applet.

This will bring up a standard Mac OS X Java security alert and if the user clicks Allow' the applet will run and try to download files from one or more remote servers.

"If files are downloaded, they are stored in an invisible folder (.jnana) in the current user's home folder," Intego explained.

"These files include elements designed to infect Mac OS X, Windows and Linux. The Java applet should also download an installer that will then launch and attempt to install the malware."

Koobface was first spotted in 2008, using subject headers such as "You look just awesome in this new movie," to lure users in.

Earlier this year, it emerged Koobface attackers were tracking the success of their fake YouTube pages.

Featured Resources

The ultimate guide to business connectivity in field services

A roadmap to increased workplace efficiency

Free download

The definitive guide to migrating to the cloud

Migrate apps to the public cloud with multi-cloud infrastructure solutions

Free download

Transform your network with advanced load balancing from VMware

How to modernise load balancing to enable digital transformation

Free download

How to secure workloads in hybrid clouds

Cloud workload protection

Free download

Recommended

Facebook pauses work on Instagram Kids
social media

Facebook pauses work on Instagram Kids

27 Sep 2021
Malware developers create malformed code signatures to avoid detection
malware

Malware developers create malformed code signatures to avoid detection

24 Sep 2021
Andrew Bosworth to replace Mike Schroepfer as Facebook CTO
Careers & training

Andrew Bosworth to replace Mike Schroepfer as Facebook CTO

23 Sep 2021
Four traits of leaders at connected companies
Whitepaper

Four traits of leaders at connected companies

8 Sep 2021

Most Popular

How to find RAM speed, size and type
Laptops

How to find RAM speed, size and type

17 Sep 2021
What are the pros and cons of AI?
machine learning

What are the pros and cons of AI?

8 Sep 2021
Best MDM solutions 2020
mobile device management (MDM)

Best MDM solutions 2020

17 Sep 2021