Multitasking DevilRobber Trojan targets Mac OS X users
Posted on 31.10.2011
Another week, another Mac OS X Trojan spotted.

Both Sophos and Intego have detected a Bitcoin-mining Trojan that also opens a backdoor into the infected system and steals Bitcoins from the user's wallet file and information such as login credentials, browsing histories and data regarding the use of Truecrypt software and TOR.

The Trojan - dubbed "DevilRobber" - is currently being spread via BitTorrent trackers and is bundled up with popular Mac software such as the GraphicConverter application and others.

One indication that the malware has found its way on a computer is that its performance slows down due to the Trojan's misuse of GPU cycles for creating Bitcoins.

Interestingly enough, users that use the Little Snitch network traffic blocker are safe even if they don't use any AV software. According to Intego, once the doctored application is launched, a script looks for that particular software and if it is found, the program terminates.

If there is not Little Snitch on the targeted computer, the Trojan will drop a file to ensure that the it launches every time the computer is rebooted or a user logs in.

While using the computer to mine for Bitcoins, the malware also searches for information that can be of use to the criminals operating the servers to which it is sent. Among this information are the user's Safari browser history, the history of commands run in the Terminal, various usernames and passwords, and even child abuse images.

While it is very likely that the criminals will try to use other methods to distribute the Trojan, for the time being users are advised to refrain from downloading software from illegitimate download services.






Spotlight

The security threat of unsanctioned file sharing

Posted on 31 October 2014.  |  Organisational leadership is failing to respond to the escalating risk of ungoverned file sharing practices among their employees, and employees routinely breach IT policies.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Fri, Oct 31st
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //