There is a new piece of spyware for Mac computers called macs.app, and it will send screenshots of your desktop to a server. It will create a directory called MacApp in your user folder, and store screenshots there to be uploaded to securitytable.org and docsforum.info.
Unlike other spyware, this time it has been signed with an Apple Developer ID. The signer is Rajinder Kumar, this is probably to get around Gatekeeper on Lion and Mountain Lion (Lion requires the 10.7.5 update). Since it's signed, Apple theoretically could disable the spyware from being installed, which would pretty much kill any change of more people being infected (unless you disable Gatekeeper, that is).
Source: f-secure.com
0 comments:
Post a Comment