Mac Trojan Horse OSX.Trojan.iServices.A Found in Pirated Apple iWork 09

[Agnostic Bear]

Exploit: OSX.Trojan.iServices.A Trojan Horse
Discovered: January 21, 2009
Risk: Serious
Description: Intego has discovered a new Trojan horse, OSX.Trojan.iServices.A, which is currently circulating in copies of Apple’s iWork 09 found on BitTorrent trackers and other sites containing links to pirated software. The version of iWork 09, Apple’s productivity suite, are complete and functional, but the installer contains an additional package called iWorkServices.pkg.


more here: http://www.intego.com/news/ism0901.asp

[HotelUser]

That's why you always download the trial from Apple's website, then get a serial elsewhere.

[newWORLDorder]

What he said ^.

Whoever downloads these packaged apps when you can get free trials (then a serial or patch) is a bit silly. Thats on any platform.

[Agnostic Bear]

What he said ^.

Whoever downloads these packaged apps when you can get free trials (then a serial or patch) is a bit silly. Thats on any platform.

At least 20,000 silly mac users most probably infected.

[newWORLDorder]

Thing is, thats nothing compared to the 'millions of silly windows users' who have virus'.


Anyway, idc. I dont have the virus.

[Kevin]

This is only the start of it, I'm sure there will be many more to come

[Blinger1]

BUT MACS CANT GET A VIRUS :O!!!!!!!!!!!!!!!!!!!!!!

and nice find too :)

[Decapitated]

"oh, thats why i got a mac no virus' screw you windows"

yeah, eat your words *******.

[xxMATTGxx]

Please keep this thread from arguments between the Windows and Mac operating system. :) Although, if i was still a Mac user I would just download off apple and get a serial :P

[RedStratocas]

like someone said above, does EVERYONE always have to turn every thread into mac vs. pc? honestly, anyone who really cares should find the nearest sharp object and fall on it.

anyway, like any virus no matter the system, you have to be an idiot to get it.

[7]

"oh, thats why i got a mac no virus' screw you windows"

yeah, eat your words *******.

thats what i was going to say LOOOOOOOL

[xxMATTGxx]

Update: Despite significant publicity surrounding this incident today, the infected iWork package remains active in the torrent community. In light of this continued activity, we have moved this report from Page 2 to our front page and are providing instructions for deactivating and removing the Trojan from infected systems.

1) (open Terminal.app)
2) sudo su (enter password)
3) rm -r /System/Library/StartupItems/iWorkServices
4) rm /private/tmp/.iWorkServices
5) rm /usr/bin/iWorkServices
6) rm -r /Library/Receipts/iWorkServices.pkg
7) killall -9 iWorkServices


Update 2: MacScan has released a free utility to remove the Trojan from infected systems.

Posted above from MacRumors, if any Mac user has got this trojan.

[Nick.]

a trojan horse is not a virus to everyone chatting **** about viruses :S

[Josh-H]

This isn't really like many windows virus' is it. Its not an exploit or anything, it's a malicous package that's installed when you install the pirated copy of iWork. Totally different as you're actually authorising the installation.

[DaveTaylor]

This isn't really like many windows virus' is it. Its not an exploit or anything, it's a malicous package that's installed when you install the pirated copy of iWork. Totally different as you're actually authorising the installation.

Lol, he's right, +rep. eugh must spread :/

[HotelUser]

"oh, thats why i got a mac no virus' screw you windows"

yeah, eat your words *******.
Come back when you know what you're talking about. (You've probably never even used OSX) One of the many reasons a lot of people have for using OSX is less viruses (keyword being less, not none). Know what you're talking about next time, and you won't make an incredibly stupid post:rolleyes:.

If this was a Trojan in Windows software nobody would think much of it. It certainly wouldn't have gotten its own news article. The fact that this was rare enough to be considered news should speak for it self as to how many less infections there are for OSX.

Before you or anyone else comes back to assume I'm some sort of Mac fanboy, I use a Windows laptop as well as my iMac.

[Decapitated]

Come back when you know what you're talking about. (You've probably never even used OSX) One of the many reasons a lot of people have for using OSX is less viruses (keyword being less, not none). Know what you're talking about next time, and you won't make an incredibly stupid post:rolleyes:.

If this was a Trojan in Windows software nobody would think much of it. It certainly wouldn't have gotten its own news article. The fact that this was rare enough to be considered news should speak for it self as to how many less infections there are for OSX.

Before you or anyone else comes back to assume I'm some sort of Mac fanboy, I use a Windows laptop as well as my iMac.


pardon? i didn't say anything that was trying to be intelligent so back the hell down, all i was stating was too many people say "macs can't get virus'/trojans" when they clearly can..



so maybe you should read through before getting all defensive babes x

[HotelUser]

pardon? i didn't say anything that was trying to be intelligent so back the hell down, all i was stating was too many people say "macs can't get virus'/trojans" when they clearly can..



so maybe you should read through before getting all defensive babes x

This applies to Windows too: just because you can get viruses doesn't mean you will get viruses. With OSX there's just less to get, therefore the chances of getting a virus on OSX are slim compared to contracting one on Windows.

Not only do the majority of Mac users not say, "Macs can't get viruses; screw you windows," but, a lot of users assume (and you've obviously done this) that because some users own Macs, it's all we use. In many causes this couldn't be further from the truth. I myself use OSX and Windows on a daily basis.

Perhaps I wouldn't get defensive if you didn't come to incorrect conclusions and start swearing at OSX users;).