Video | Business Headlines | Internet | Science | Scientific Ethics | Technology | Search

 

Symantec Security Response: OSX.Leap.A

Symantec Security Response: OSX.Leap.A

Symantec Security Response has today identified a new worm that targets users of the Macintosh OSX. 10.4 operating system. Currently categorised as a Level 1 threat (on a scale of 1 to 5, with 5 being most severe), OSX.Leap.A is a worm with file infecting functionality, which spreads via the iChat Instant Messaging program.

The worm makes use of the Spotlight search program, included in OSX, and will run each time the machine boots. It identifies any applications being started and if iChat begins to run, it uses this to send the infected file - latestpics.tgz - to all contacts on the infected user's buddy list. Those on the buddy list will then be asked to accept the file, which, if they accept, will subsequently be saved to their hard drive.

"As with some of the threats to mobile devices that we have seen, this worm will not automatically infect, but will ask users to accept the file. This gives potential victims a heads up and the opportunity to avoid infection, by not accepting the file. The important piece of advice for any iChat users running OSX 10.4 is not to accept file transfers, even if they come from someone on a buddy list. It is also possible to set iChat to ask for permission before sending a file. If this option is set and users are asked to confirm that they want to send a file -- when they were not aware that they were doing so -- alarm bells should ring," said Kevin Hogan, senior manager, Symantec Security Response.

In addition to using worm-like propagation techniques, OSX.Leap.A is a file infecting virus. This kind of behaviour was common in the days of DOS viruses and Hogan adds: "Interestingly, we are starting to see a slight increase in file infectors, with this being the third recent example.
Although any potential victims will be alerted and have to accept a file before infection can take place, if they do so, it is unlikely that they will be aware that they have fallen prey to this - when applications are run, they will do so normally"

Users of Macintosh OS X 10.4 are advised to ensure that iChat will request permission before transferring a file and not to accept incoming files. Antivirus and firewall software, as well as operating systems, should be kept up-to-date, to provide maximum levels of security.

More information is available at http://securityresponse.symantec.com/avcenter/venc/data/osx.leap.a.html

ENDS

© Scoop Media

 
 
 
Business Headlines | Sci-Tech Headlines

 

Voluntary Administration: Renaissance Brewing Up For Sale

Renaissance Brewing, the first local company to raise capital through equity crowdfunding, is up for sale after cash flow woes and product management issues led to the appointment of voluntary administrators. More>>

Elsewhere:

Approval: Northern Corridor Decision Released

The approval gives the green light to construction of the last link of Auckland’s Western Ring Route, providing an alternative route from South Auckland to the North Shore. More>>

ALSO:

Media Mega Merger: Full Steam Ahead For Appeal

New Zealand's two largest news publishers have confirmed they are committed to pursuing their appeal against the Commerce Commission's rejection of the proposal to merge their operations. More>>

Crown Accounts: $4.1 Billion Surplus

The New Zealand Government has achieved its third fiscal surplus in a row with the Crown accounts for the year ended 30 June 2017 showing an OBEGAL surplus of $4.1 billion, $2.2 billion stronger than last year, Finance Minister Steven Joyce says. More>>

ALSO:

Mycoplasma Bovis: One New Property Tests Positive

The newly identified property... was already under a Restricted Place notice under the Biosecurity Act. More>>

Accounting Scandal: Suspension Of Fuji Xerox From All-Of-Government Contract

General Manager of New Zealand Government Procurement John Ivil says, “FXNZ has been formally suspended from the Print Technology and Associated Services (PTAS) contract and terminated from the Office Supplies contract.” More>>