Linked by Thom Holwerda on Sat 18th Apr 2009 09:27 UTC
Mac OS X Remember the Mac trojan that we reported about earlier this year? A trojan was found piggybacking on the back of copies of iWork and Photoshop CS4 found on warez sites and networks, and it would install itself after the user had entered his or her administrator password during the software's installation. This trojan didn't seem like much of a threat back then, but as it turns out, it's now in use in the first Macintosh botnet.
Permalink for comment 359264
To read all comments associated with this story, please click here.
RE[6]: Hmmmm...
by Valhalla on Sat 18th Apr 2009 15:42 UTC in reply to "RE[5]: Hmmmm..."
Valhalla
Member since:
2006-01-24

Thom Holwerda wrote:
-"The funny bit is, though, that a trojan like this would NEVER get through Windows Vista/7. Malware protection is built-in now, so I'd get a nice little dialog on my Windows boxes telling me this file is dangerous, we've blocked it for you. You want us to delete it?"

I find this doubtful. Practically all Windows games and most applications requires administrator rights to install (mainly because of arcane copy protection mechanisms), how would the OS distinguish between DRM functionality included in a game (like protections which install services) and a trojan if baked into the installation procedure? These DRM schemes, just like trojans and rootkits vary greatly and are constantly changed so there is no way the OS can be updated to keep track and identify them, not even dedicated virus software can keep up.

Reply Parent Bookmark Score: 2