New Trojan Targets Mac OS X
http://www.macnn.com/articles/07/10/....targets.macs/
Quote:
The trojan itself is a form of DNSChanger, using the scutil command to change the Mac's DNS server -- a service that translates hostnames like macnn.com to their numerical IP addresses. Using a poisoned DNS server, the Mac hijacks some Web requests for phishing or to generate revenue from pornographic advertisements.
What's more, under Mac OS X 10.4 Tiger there is no way to see the changed DNS server in the operating system's graphical user interface, although in Mac OS X 10.5 Leopard users can see the change in the Advanced Network preferences; the added DNS servers are dimmed and cannot be removed manually.
Intego says all versions of Mac OS X include the scutil command, suggesting that all versions are vulnerable to the new trojan.
|
__________________
"Opinions are like demo tapes, and I don't want to hear yours" -- Stephen Colbert
|