The Mac Observer

Skip navigational links

You're viewing an article in TMO's historic archive vault. Here, we've preserved the comments and how the site looked along with the article. Use this link to view the article on our current site:
SecureMac Documents Mac OS X Trojan Horse

SecureMac Documents Mac OS X Trojan Horse

by , 2:05 PM EDT, June 20th, 2008

SecureMac has posted an advisory about a Mac OS X Trojan Horse that exploits a vulnerability in the Apple Remote Desktop Agent and allows the malware to run as root. The vulnerability is rated critical.

The Trojan Horse runs hidden on the system and allows a malicious user complete remote access to the system. It can transmit system and user passwords and can avoid detection by opening ports in the firewall and turning off system logging. It can also do unwanted things like take pictures, take screenshots and turn on file sharing.

"The Trojan is distributed as either a compiled AppleScript, called ASthtv05 (60 KB in size), or as an application bundle called AStht_v06 (3.1 MB in size). The user must download and open the Trojan horse in order to become infected," according to Nicholas Raba at SecureMac.

The vulnerability is rated "Critical" and applies to OS X Tiger and OS X Leopard.

Regarding a remedy, Mr. Raba told TMO that MacScan 2.5.2 with the Definitions Update 2008011 will deal with the Trojan Horse if the user feels that they need an immediate solution. Other companies that supply anti-virus and security products will likely be providing updates soon, and Mac users should contact their favorite vendor for details.

The vulnerability has been reported to other more general tracking sites such as Secunia.com.

Intego, which first reported the vulnerability on Thursday, also posted an alert with suggestions for blocking the Trojan Horse.

Recent TMO Headlines - Updated December 1st

Thu, 11:42 AM
Apple Original Films Hosts Hollywood Premiere of Will Smith's 'Emancipation'
Thu, 3:00 AM
Music and Video Wrapped and Replayed - TMO Daily Observations 2022-12-01
Wed, 5:26 PM
San Francisco Police Department Robots Can Use Deadly Force, Exempt From Asimov’s Laws of Robotics
Wed, 4:52 PM
Tim Cook and Elon Musk Stroll Around the Duck Pond at Apple HQ
Wed, 4:49 PM
Apple Releases iOS 16.1.2 with Security Fixes and Crash Detection Optimization
Wed, 3:59 PM
Spotify's 2022 Wrapped Experience is Here, Features New Personality Test and More
Wed, 2:59 PM
Apple and Others Face Lawsuits Following Fatal Hingham Crash
Wed, 1:53 PM
Lost, Not Deferred, iPhone 14 Sales, Settled Lawsuits and Then Good News
Wed, 1:26 PM
Court Grants Apple’s $50M Settlement Offer in Butterfly Keyboard Lawsuit
Wed, 12:52 PM
New 'The Greatest' Video Highlights Accessibility Features in Apple Products
Wed, 12:12 PM
Apple's Crash Detection Feature Triggers Uptick in Accidental Emergency Calls from Skiiers
Wed, 12:08 PM
Apple TV+ Gives First Look at Original Series 'Shrinking' Starring Jason Segel and Harrison Ford
  • __________
  • Buy Stuff, Support TMO!
  • Podcast: Mac Geek Gab
  • Podcast: Daily Observations
  • TMO on Twitter!