Video | Business Headlines | Internet | Science | Scientific Ethics | Technology | Search

 


Symantec Security Response: OSX.Leap.A

Symantec Security Response: OSX.Leap.A

Symantec Security Response has today identified a new worm that targets users of the Macintosh OSX. 10.4 operating system. Currently categorised as a Level 1 threat (on a scale of 1 to 5, with 5 being most severe), OSX.Leap.A is a worm with file infecting functionality, which spreads via the iChat Instant Messaging program.

The worm makes use of the Spotlight search program, included in OSX, and will run each time the machine boots. It identifies any applications being started and if iChat begins to run, it uses this to send the infected file - latestpics.tgz - to all contacts on the infected user's buddy list. Those on the buddy list will then be asked to accept the file, which, if they accept, will subsequently be saved to their hard drive.

"As with some of the threats to mobile devices that we have seen, this worm will not automatically infect, but will ask users to accept the file. This gives potential victims a heads up and the opportunity to avoid infection, by not accepting the file. The important piece of advice for any iChat users running OSX 10.4 is not to accept file transfers, even if they come from someone on a buddy list. It is also possible to set iChat to ask for permission before sending a file. If this option is set and users are asked to confirm that they want to send a file -- when they were not aware that they were doing so -- alarm bells should ring," said Kevin Hogan, senior manager, Symantec Security Response.

In addition to using worm-like propagation techniques, OSX.Leap.A is a file infecting virus. This kind of behaviour was common in the days of DOS viruses and Hogan adds: "Interestingly, we are starting to see a slight increase in file infectors, with this being the third recent example.
Although any potential victims will be alerted and have to accept a file before infection can take place, if they do so, it is unlikely that they will be aware that they have fallen prey to this - when applications are run, they will do so normally"

Users of Macintosh OS X 10.4 are advised to ensure that iChat will request permission before transferring a file and not to accept incoming files. Antivirus and firewall software, as well as operating systems, should be kept up-to-date, to provide maximum levels of security.

More information is available at http://securityresponse.symantec.com/avcenter/venc/data/osx.leap.a.html

ENDS

© Scoop Media

 
 
 
 
 
Business Headlines | Sci-Tech Headlines

 

Half A Billion Accounts: Yahoo Confirms Huge Data Breach

The account information may have included names, email addresses, telephone numbers, dates of birth, hashed passwords (the vast majority with bcrypt) and, in some cases, encrypted or unencrypted security questions and answers. More>>

Rural Branches: Westpac To Close 19 Branches, ANZ Looks At 7

Westpac confirms it will close nineteen branches across the country; ANZ closes its Ngaruawahia branch and is consulting on plans to close six more branches; The bank workers union says many of its members are nervous about their futures and asking ... More>>

Interest Rates: RBNZ's Wheeler Keeps OCR At 2%

Reserve Bank governor Graeme Wheeler kept the official cash rate at 2 percent and said more easing will be needed to get inflation back within the target band. More>>

ALSO:

Half Full: Fonterra Raises Forecast Payout As Global Supply Shrinks

Fonterra Cooperative Group, the dairy processor which will announce annual earnings tomorrow, hiked its forecast payout to farmers by 50 cents per kilogram of milk solids as global supply continues to decline, helping prop up dairy prices. More>>

ALSO:

Results:

Meat Trade: Silver Fern Farms Gets Green Light For Shanghai Maling Deal

The government has given the green light for China's Shanghai Maling Aquarius to acquire half of Silver Fern Farms, New Zealand's biggest meat company, with ministers satisfied it will deliver "substantial and identifiable benefit". More>>

ALSO:

Get More From Scoop

 
 
 
 
 
 
 
 
 
Sci-Tech
Search Scoop  
 
 
Powered by Vodafone
NZ independent news