And another one...

[KnightWRX]

http://www.zdnet.com/new-mac-trojan-installs-silently-no-password-required-7000001519/

New Mac Trojan installs silently, no password required

Summary: A new Mac OS X Trojan referred to as OSX/Crisis silently infects OS X 10.6 Snow Leopard and OS X 10.7 Lion. The threat was created in a way that is intended to make reverse engineering more difficult, an added extra that is more common with Windows malware than it is with Mac malware.

Instructions on how to check your systems in the article, until Apple updates X-protect that is.

 

[belvdr]

Interesting that it can install regardless of administrative rights on the machine.

 

[smoledman]

Still not a single OS X virus in the wild...

 

[roadbloc]

Still not a single OS X virus in the wild...

Thanks for the clarification. I have trouble differentiating from the word 'Trojan' and 'Virus' when looking at the MacRumors forum font.

Wouldn't Gatekeeper and the malware definitions that Apple supposedly push regularly have everyone sorted?

 

[Dr McKay]

Still not a single OS X virus in the wild...

Yes because that matters so much.

 

[KnightWRX]

Wouldn't Gatekeeper and the malware definitions that Apple supposedly push regularly have everyone sorted?

Gatekeeper doesn't apply since this one is for Snow Leopard and Lion. It will be a while under Mountain Lion penetration is sufficient to say this one is irrelevant.

And yes, Apple can push X-protect definitions for this one. Just thought it was important for everyone to check their systems now since this one doesn't seem to even require social engineering.

 

[GGJstudios]

Yes because that matters so much.

Yes, it does. If malware isn't in the wild, no user can encounter it, so it's not a threat. As the article says:

The good news is that the security firm has yet to find OSX/Crisis in the wild

 

[KnightWRX]

Yes, it does. If malware isn't in the wild, no user can encounter it, so it's not a threat. As the article says:

You're misinterpreting that. It's not that it's not in the wild, it's that Intego haven't seen it in the wild, ie, their paying customers haven't been caught with it yet.

Since Intego's list of customers must be pretty small compared to the whole of the Mac install base, then doing a manual check up once you're aware of the threat takes a few minutes and can save you tons of grief.

Let's not put our heads in the sand. And what benjy alluded to is that in the case, that there are no OS X virus doesn't matter, as this is not an article about viruses on OS X.

 

[duncyboy]

Be interesting to see how quickly Apple respond to this (if at all).

Isn't part of Mountain Lion more prompt individual security updates?