backdoor

New OSX/Crisis malware found for OS X 10.6 and 10.7

A new script-based malware threat for OS X has been uncovered by security company Intego. The malware, called OSX/Crisis, has so far not been found "in the wild," but it has the potential to do harm.

Apparently the threat only runs on OS X 10.6 and 10.7 machines, and while it does not require a password to install, if a password is provided then the mode of infection changes. Most of the installed files are randomly named, though in all cases the malware appears to install a file called "appleHID" in the /Library/… Read more

Intel OS X binary of latest multiplatform malware discovered

Earlier this week security company F-Secure uncovered a new Web-based malware attack that uses Java to identify and distribute platform-specific malware binaries to OS X, Windows, and Linux installations. In the company's first findings, the malware being issued for OS X was a PowerPC binary, which prevented it from running on many Macs using Snow Leopard and Lion; however, new developments have unveiled an x86 binary for the malware.

This new variant of the malware is essentially the same as the previous findings, with the exception that it will run on Lion and Snow Leopard systems without the need … Read more

Experts dispute threat posed by backdoor found in Chinese chip

A recent report that a Chinese computer chip used by the U.S. military has a hidden backdoor that could allow the manufacturer to disable devices are overblown, one security researcher says.

Researchers at Cambridge University issued a dire warning today about a security bypass they said they had identified in a nonencrypted chip made by Microsemi in China, and used in weapons, nuclear power plants, and even public transportation.

"We scanned the silicon chip in an affordable time and found a previously unknown backdoor inserted by the manufacturer," security researcher Sergei Skorobogatov wrote in the publication of … Read more

Get into Avira Free Antivirus 12 faster than before

The bottom line: An aggressive redesign aimed at making its best-known suite more accessible than before, Avira Free Antivirus 12 combines fast scans with above-average protection for a solid security combo.

Review: Free antivirus maker Avira debuts a laundry list of changes in its latest major update, basically repositioning the suite to remain competitive in the face of tougher competition from other free security suites and a renewed emphasis on performance from paid competitors. From the new breezy installation to the modernized interface and reputable security, the suite has a lot going for it.

However, it notably lacks some features … Read more

New OS X Trojan horse sends screenshots, files to remote servers

These days when people think of malware and OS X the first name that comes to mind is likely MacDefender or one of its variants, which were rogue utilities designed to trick users into giving up personal and financial information. As the Mac gains in popularity there will undoubtedly be more attempts like this, and recently a new Trojan horse attempt for OS X has surfaced that tries to steal users' personal information.

The malware was first seen in late July of this year, and has been identified by security firms F-Secure and Sophos as "Trojan dropper" and "backdoor" utilities that both work in tandem to install on the system.… Read more

Closing backdoor threats in OS X

A "back door" in computing terms is a method that hackers use to circumvent a system's authentication features and gain access without being detected. Usually this involves taking advantage of bugs in the built-in sharing services and OS features, but it also can happen if a user inadvertently installs some malware that provides a path around the system's security.

Anytime you start a sharing service on your computer, be it for files, screen sharing, chatting, or printers, you are technically opening a door for a client application running on remote system to connect and change or … Read more

iPad users on Windows targeted with malware

Scammers are distributing e-mails designed to trick iPad owners into downloading software that they think is an iTunes update, but which turns out to be malware that opens a back door on the computer, researchers warned on Monday.

The e-mails have a subject line that says "iPad Software Update" and offer a link to a Web page that looks like a legitimate iTunes download page, according to BitDefender. Instead, the link installs malware identified as Backdoor.Bifrose.AADY, according to the BitDefender blog.

The malware injects itself in to the "explorer.exe" process and opens up … Read more

EyeTV iPhone app briefly allows 3G video streaming

Elgato's EyeTV iPhone app isn't supposed to allow you to stream video from a computer to your iPhone over a 3G connection, but a recently discovered backdoor exploit allows users of the app's first version to do so anyway.

Apple reacted to the news of the backdoor exploit by quickly pulling the app from the App Store on Saturday. Today, we found out that the app has been restored to the store and was briefly for sale again--an unusual occurrence in the App Store. Elegato's backdoor-free 1.0.1 version is now available in the App … Read more

New exploit targets IE 7 hole patched last week

Cybercriminals are exploiting a critical hole in Internet Explorer 7 that was patched a week ago by Microsoft, security firm Trend Micro warned on Tuesday.

The malicious code, which Trend Micro named "XML_DLOADR.A," is hidden in a Word document. On unpatched systems, when the file is opened an ActiveX object automatically accesses a Web site to open a backdoor that installs a .DLL (dynamic link library) file that can steal information, according to a Trend Micro blog entry. The code sends stolen data to another Web address via port 443, Trend Micro said.

As a result of … Read more