Trojan Target Mac Users Installing Pirated Copy of iWork 09 Suite

Intego, which focuses only on Mac OS X security products, said that it has detected an unfamiliar Trojan that infects PCs running Mac OS X. The Trojan horse was discovered with illegitimate copies of Apple's latest office productivity suite, iWork 09, on websites trading pirated software. Security software vendor Sophos also detected the same Trojan.

Intego named the Trojan as "iWorkServices". Both the firms claimed that the malicious code is embedded in the iWork installer software and executes when the end-user starts installing the pirated copy of the software.

After installation, the malware links to a remote server, creating a "backdoor" to the targeted system, permitting a hacker to hijack any compromised computer and steal private data.

Intego also disclosed that when the malware links with an online remote server, the hacker is immediately informed that the Trojan horse has been deployed on various Macs. Now the hacker has to access them to perform various malicious actions remotely.

The firm also said that extra features could be installed on the affected systems, since the malicious software gives root access.

Security specialists believe that the malware is spreading through BitTorrent hidden within unauthorized copy of Apple's latest iWork '09 suite. Surprisingly, cyber criminals have chosen pirated copy of iWork '09 to act as the Trojan's host, after Apple loosened its anti-piracy security on the software.

Mike Romo, Product Manager of Symantec, said that although the firm has classified the Trojan as low risk, a significant threat still remains, as reported by Vnunet on January 23, 2009. Romo further said that the issue is still serious because amidst ongoing economic depression, greater number of people might be attracted to pirated software rather than paying for the original.

Intego also purports that nearly 20,000 individuals have downloaded compromised copies of iWork 09.

Intego advises Mac consumers to refrain from downloading iWork 09 applications from websites providing pirated software. The danger of infection is very high, and people may have to bear very serious consequences if their Macs are exposed to hackers.

Related article: Trojans to Target VoIP in 2006

» SPAMfighter News - 2/4/2009