November 28, 2022
Trojan Horse Found in iWork 09 Torrent

Trojan Horse Found in iWork 09 Torrent

Posted January 22, 2009 at 12:39pm by iClarified · 9242 views
Intego has discovered a new Trojan horse, OSX.Trojan.iServices.A, which is currently circulating in copies of Apple’s iWork 09 found on BitTorrent trackers and other sites containing links to pirated software.

Trojan Horse Found in iWork 09 Torrent

-----
The version of iWork 09, Apple’s productivity suite, are complete and functional, but the installer contains an additional package called iWorkServices.pkg. When installing iWork 09, the iWorkServices package is installed. The installer for the Trojan horse is launched as soon as a user begins the installation of iWork, following the installer’s request of an administrator password (in older versions of Mac OS X, 10.5.1 or earlier, there will be no password request). This software is installed as a startup item (in /System/Library/StartupItems/iWorkServices, a location reserved normally for Apple startup items), where it has read-write-execute permissions for root. The malicious software connects to a remote server over the Internet; this means that a malicious user will be alerted that this Trojan horse is installed on different Macs, and will have the ability to connect to them and perform various actions remotely. The Trojan horse may also download additional components to an infected Mac.

Intego is issuing this alert to warn Mac users not to download iWork 09 installers from sites offering pirated software. (As of 6 am EST, at least 20,000 people have downloaded this installer.) The risk of infection is serious, and users may face extremely serious consequences if their Macs are accessible to malicious users.
-----

Read More
Add Comment
Would you like to be notified when someone replies or adds a new comment?
Yes (All Threads)
Yes (This Thread Only)
No
iClarified Icon
Notifications
Would you like to be notified when we post a new Apple news article or tutorial?
Yes
No
You must login or register to add a comment...
buck
buck - January 22, 2009 at 6:11pm
first obama.. and now this!!!
brindy
brindy - January 22, 2009 at 3:21pm
I hope it really fucked up some software stealing fucker's mac.
mac doctor
mac doctor - January 22, 2009 at 9:40pm
it will cost them then the software to repair. how cheap can people be... LOL
Recent. Read the latest Apple News.
RECENT
Tutorials. Help is here.
TUTORIALS
How to Fix 'No Matching Host Key Type Found' on Mac
Where to Download macOS Ventura
How to Stream the World Cup Using a VPN
AppleTV Firmware Download Locations
Where To Download iPhone Firmware Files From
Deals. Save on Apple devices and accessories.
DEALS