First Virus to Hit the Mac OS X

[Aaron]

First recorded Mac OS X worm meets a well-prepared user community

Click here to read the entire article.

An instant messaging worm, code-named OSX/Leap-A, poses as a JPEG image (latestpics.jpg) being shared on the iChat service, is being recognized for what it is by thousands of Mac users: not a major threat, specifically because Mac users recognize it.

According to Sophos Labs, the worm spreads itself by distributing copies of its compressed payload to users in an infected system's buddy list. Once uncompressed, the payload disguises itself as a JPEG image by fooling the system into utilizing a JPEG icon - a more difficult trick, arguably, than for a Windows attachment masquerading as an image.

When the user double-clicks on the image, the user is given a username and password screen, as though the folder containing this image required administrator privileges to run. Only when the user supplies these items can the payload successfully install itself in the user's Macintosh, and begin infecting application files from there.

According to MacWorld, the worm proceeds to infect applications that run on the Cocoa platform, the Mac's counterpart to Windows .NET Framework. Using a common API call, the worm finds the four most recently used applications, and infects their files. The infection appears at this point to be non-destructive beyond that level.

[gameuser]

Once uncompressed, the payload disguises itself as a JPEG image by fooling the system into utilizing a JPEG icon - a more difficult trick, arguably, than for a Windows attachment masquerading as an image.

More difficult? Easier, in fact...

I knew this aspect of the Mac OS would be exploited someday... since MacOS does not use file extensions and relies heavily on only icons it is difficult to discern between a real picture and a program with a JPG icon. Under Windows, seeing .EXE on the end of the filename is enough.

[DinglyDicks]

Well don't Macs use Intel processors now?

[Lint]

Gasp* My theory of macs sucking is now proved? I should install linux =\

[NeoShinobi]

I am never going to install Mac, I rather wait for Windows Vista.

[zubu]

okay people time to move onto linux ^^ .. i love UNIX!

[LCS]

Originally Posted by NeoShinobi

I am never going to install Mac, I rather wait for Windows Vista.

Which will also be infested with viruses... even more so.

Here is a new feature of Microsoft Windows Vista:

Windows Vista will be compatible with older programs from Windows 95 to Windows XP and Windows 2003. You will be content knowing that all your ancient programs and viruses will run on your new system.

[gameuser]

It's the user's responsibility to ensure that she does not get infected with viruses, not the OSs.

Those who are stupid enough to infect themselves deserve the consequences.

[Wacko0500]

Harsh gameuser, I hate macs, i find this to be great news, it will discourage everyone from buying macs, i dont see the point in them. Everyone says you can video edit, and music edit better, but you can do just as good on windows. Not to mension all the games, and compatible windows software. Mac users = stupid.

[saint_soldier]

its totally not true that u can edit all those stuff much better on mac then on windows, first its the software, apparently, macs do hav a advantage but still require prfessional skill to totally get hold of the use of the software, then again, you can do all that on windows and...which system/os isn't infected yet...all have, virus developers mostly develop on their viruses on growing platforms...soon it will be linux...but another fact is that, apple is growing fast and i heard that many games and software applications are going to be ported over to macs, it could be wrong, but i guess it might be true, as people the developers would want to make the extra cash by porting it over!