BrickHouse Security Blog

Mac users are all in a buzz about the latest Mac operating system release, Snow Leopard. However there are already growing compatibility and security concerns. According to Trend Micro, one of their researchers have discovered several websites advertising free versions of the new Mac operating system that actually download malware viruses into the users computer. Specifically the virus is a DNS changing Trojan called OSX_JAHLAV.K. According to Trend Micro, the virus  may also be downloaded without the user’s knowledge following a visit to a malicious Web site.

Trend Micro’s Bernadette Irinco stated,”Once executed, OSX_JAHLAV.K decrypts codes, which include a script that downloads other malicious scripts…the said script then alters the DNS configuration and includes two additional IP addresses in its DNS server. Users are thus possibly redirected to phishing sites and other fraudulent sites. In fact, some of these bogus sites are reportedly hosting FAKEAV (rogue antivirus) variants and components.”

There are many people that would love to have the latest technology at their fingertips before anything else. But we must all remember to not click on links that promise something to good to be true. Fortunately, in this case, the Trojan has a low overall risk rating. Still, the best way to attain new products is to buy directly from the manufacturers and reputable retailers.

(Via Donna’s security flash)