<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>At Work On a Mac &#187; Security</title>
	<atom:link href="http://www.mac2work.com/category/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.mac2work.com</link>
	<description>2 Geeks On Macs, Gadgets, Games and Life...</description>
	<lastBuildDate>Thu, 16 Dec 2010 11:08:56 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.1</generator>
		<item>
		<title>New Mac Trojan in Pirated Photoshop through BitTorrent</title>
		<link>http://www.mac2work.com/2009/01/27/new-mac-trojan-in-pirated-photoshop-through-bittorrent/</link>
		<comments>http://www.mac2work.com/2009/01/27/new-mac-trojan-in-pirated-photoshop-through-bittorrent/#comments</comments>
		<pubDate>Tue, 27 Jan 2009 10:22:27 +0000</pubDate>
		<dc:creator>François Reeves</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Software]]></category>

		<guid isPermaLink="false">http://www.mac2work.com/?p=196</guid>
		<description><![CDATA[No comment really. 5,000 more Macs infected by a wicked Trojan installed during the activation of cracked Photoshop downloaded through BitTorrent streams. The new Mac Trojan variant OSX.Trojan.iSerices.B, detected last Thursday, is found in the crack application bundled with copies of Adobe Photoshop CS4 for Mac. While the actual Adobe Photoshop installer is bug-free, the [...]]]></description>
			<content:encoded><![CDATA[<p>No comment really. 5,000 more Macs infected by a wicked <a href="http://www.crn.com/security/212902615">Trojan installed during the activation of cracked Photoshop</a> downloaded through BitTorrent streams.</p>
<blockquote><p>The new Mac Trojan variant OSX.Trojan.iSerices.B, detected last Thursday, is found in the crack application bundled with copies of Adobe Photoshop CS4 for Mac. While the actual Adobe Photoshop installer is bug-free, the Trojan embeds itself into a crack application that serializes the program, Intego said. After downloading the pirated Photoshop, the crack application extracts an executable from its data, then installs a backdoor in a file directory, which is not deleted when the computer reboots. If the user runs the crack application again, the Trojan creates another executable with a different name, making the malware more difficult to trace and safely remove.</p></blockquote>
<div style="text-align:center;"><img src="http://www.mac2work.com/wp-content/uploads/2009/01/backdoor.jpg" alt="backdoor.jpg" border="0" width="400" height="266" /></div>
<p>It might be time to install <a href="http://www.avast.com/eng/download-avast-mac-edition.html">Avast</a> if you&#8217;re hanging around nasty sites. There&#8217;s a huge difference between anti-virus and anti-malware. There&#8217;s not a lot of descriptive notes on Avast&#8217;s effeciency with new threats of the Trojan category. Give it a try and if it slows you&#8217;re system down too much, start acting defensively with safe behaviour (no visit to illicit sites, no clicking on attachments from strangers, no downloading of strange PDFs or software, no execution of jpegs and mpegs with browsing software, change root password every month, no getting your emails from public places without changing your user passwords afterwards). </p>
<p>What you might also do is create a web browsing user without administrative privileges, disable Javascript, use Firefox (especially good at phishing detection).</p>
]]></content:encoded>
			<wfw:commentRss>http://www.mac2work.com/2009/01/27/new-mac-trojan-in-pirated-photoshop-through-bittorrent/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

