Re: mac trojan in-the-wild

2007-11-01 Thread Matthew Leeds
Let's see now, user must: 1) Navigate to porn site 2) Download Trojan 3) Either open file or have set 'Open Safe Files...' 4) Must allow install by typing admin password Oh yeah, this will clearly hit Mac users hard, not. I don't see this as a big deal, more as Darwin in action (if you will not

RE: mac trojan in-the-wild

2007-11-01 Thread Thor (Hammer of God)
> For whoever didn't hear, there is a Macintosh trojan in-the-wild being > dropped, infecting mac users. > Yes, it is being done by a regular online gang--itw--it is not yet > another > proof of concept. The same gang infects Windows machines as well, just > that now they also target macs. > > htt

RE: mac trojan in-the-wild

2007-11-01 Thread Alex Eckelberry
gtraq@securityfocus.com Subject: Re: mac trojan in-the-wild Let's see now, user must: 1) Navigate to porn site 2) Download Trojan 3) Either open file or have set 'Open Safe Files...' 4) Must allow install by typing admin password Oh yeah, this will clearly hit Mac users hard, not. I

RE: mac trojan in-the-wild

2007-11-01 Thread Alex Eckelberry
ursday, November 01, 2007 8:15 PM To: Gadi Evron; bugtraq@securityfocus.com; [EMAIL PROTECTED] Subject: RE: mac trojan in-the-wild > For whoever didn't hear, there is a Macintosh trojan in-the-wild being > dropped, infecting mac users. > Yes, it is being done by a regular online gang--i

RE: mac trojan in-the-wild

2007-11-02 Thread Roger A. Grimes
mber 02, 2007 1:19 AM To: Roger A. Grimes; bugtraq@securityfocus.com; [EMAIL PROTECTED] Cc: Alex Eckelberry; Gadi Evron Subject: RE: mac trojan in-the-wild That's an interesting figure (86% that is). Can you give us some insight into what you define as "user interaction"? If it is clicking a

RE: mac trojan in-the-wild

2007-11-02 Thread Memisyazici, Aras
get hit by this easily! Aras "Russ" Memisyazici IT Specialist II Virginia Tech Outreach Information Services -Original Message- From: "Matthew Leeds" <[EMAIL PROTECTED]> To: "bugtraq@securityfocus.com" Sent: 11/1/07 5:29 PM Subject: Re: mac trojan in-th

Re: mac trojan in-the-wild

2007-11-02 Thread nnp
? Seems like whistling past the graveyard to me. > > Alex > > > -Original Message- > From: Thor (Hammer of God) [mailto:[EMAIL PROTECTED] > Sent: Thursday, November 01, 2007 8:15 PM > To: Gadi Evron; bugtraq@securityfocus.com; > [EMAIL PROTECTED] > Subject: R

Re: mac trojan in-the-wild

2007-11-02 Thread Nick FitzGerald
Matthew Leeds wrote: > Let's see now, user must: > > 1) Navigate to porn site > 2) Download Trojan > 3) Either open file or have set 'Open Safe Files...' > 4) Must allow install by typing admin password > > Oh yeah, this will clearly hit Mac users hard, not. I don't see this > as a big deal, mor

RE: mac trojan in-the-wild

2007-11-02 Thread Roger A. Grimes
uring-Malicious/dp/0470 101555 * -Original Message- From: Alex Eckelberry [mailto:[EMAIL PROTECTED] Sent: Thursday, November 01, 2007 5:49 PM To: Thor (Hammer of God); Gadi Evron; bugtraq@securityfocus.com; [EMAIL PROTECTED] Subje

Re: mac trojan in-the-wild

2007-11-02 Thread Robert McArdle
> > -Original Message- > > From: Thor (Hammer of God) [mailto:[EMAIL PROTECTED] > > Sent: Thursday, November 01, 2007 8:15 PM > > To: Gadi Evron; bugtraq@securityfocus.com; > > [EMAIL PROTECTED] > > Subject: RE: mac trojan in-the-wild > > > >

RE: mac trojan in-the-wild

2007-11-02 Thread Thor (Hammer of God)
ng business. t > -Original Message- > From: Roger A. Grimes [mailto:[EMAIL PROTECTED] > Sent: Thursday, November 01, 2007 5:37 PM > To: Alex Eckelberry; Thor (Hammer of God); Gadi Evron; > bugtraq@securityfocus.com; [EMAIL PROTECTED] > Subject: RE: mac trojan in-the

RE: mac trojan in-the-wild

2007-11-02 Thread Jim Harrison
ose comparative points, my Kaypro-4 running ZCPR is more secure than any Apple OS. Jim -Original Message- From: Thor (Hammer of God) [mailto:[EMAIL PROTECTED] Sent: Thursday, November 01, 2007 5:15 PM To: Gadi Evron; bugtraq@securityfocus.com; [EMAIL PROTECTED] Subject: RE: mac trojan in-

RE: mac trojan in-the-wild

2007-11-02 Thread Gadi Evron
On Thu, 1 Nov 2007, Jim Harrison wrote: While Apple-oriented threats may not get either the validation or the publicity (on hardly equals the other) that Windows attacks do, it's hardly accurate (much less fair) to make those comparisons. For all those comparative points, my Kaypro-4 running ZC

the heart of the problem [was: RE: mac trojan in-the-wild]

2007-11-02 Thread Gadi Evron
On Thu, 1 Nov 2007, Thor (Hammer of God) wrote: But more importantly, let's look at things from the other side. Let's say I'm wrong, and that Gadi is right on target with his "hit hard" I'd say we are both right. You look at it from a security researcher stand-point. There is nothing interest