Saturday, November 25th 2006

Hackers debut adware that only affects Mac OS X 10

F-Security labs has discovered how to install adware on Macintosh OS X 10. The adware (called iAdware) loads itself with each program as a system library. The adware only needs copy permissions to install, so it does not need administrator privileges to be installed. Compared to some adware for the PC, iAdware is relatively harmless. The proof-of-concept bug launches a web browser window when any program is launched. F-Secure says that a prompt to install system library files would effectively stop iAdware from installing.
Source: F-Secure
Add your own comment

16 Comments on Hackers debut adware that only affects Mac OS X 10

#1
Dippyskoodlez
Problem is, it has to be installed.

And how is that going to be done?
Posted on Reply
#2
Steevo
By the same means that idiots install "free" stuff on a PC. A better idiot has been built again.
Posted on Reply
#3
Dippyskoodlez
SteevoBy the same means that idiots install "free" stuff on a PC. A better idiot has been built again.
problem is, installing stuff on OS X involves copying it to your aplication folder, and executing it manually, or running an install program that copys it over for you...

In other words, if the user has to manually execute the exploit, its not an exploit in my book. Just an end user security issue caused by idiots.

yeah, if I open a command window from windows and delete my windows folder, does that mean its a security risk too? :banghead: (then again, thats why we don't give users a command prompt ability in a networked enviroment... too bad it has to manually disabled too.)
Posted on Reply
#4
Steevo
Trust me, it will happen.
Posted on Reply
#5
Dippyskoodlez
SteevoTrust me, it will happen.
Thats like saying trust me, windows will fail too. :laugh:

Its impossible to protect against the idiot user...

Which is why i have a job. :roll:

Thing is, its much more difficult in OS X to do something that is trivial in windows, with an exploit like this.

You cannot just "add" it to startup, as that prompts for the user password... eliminating that way of executing the file..

so unless the user authorizes its addition, AND manually executes it, it cant be exploited by any known means...



But if the user authorizes it and manually executes it................Its not different than anything else..
Posted on Reply
#6
jocksteeluk
CONGRATS SPYWARE MAKERS, you pieces of s**t
Posted on Reply
#7
newtekie1
Semi-Retired Folder
It just has to be copied, which can easily be done using a script file embedded with a "safe" program. The same way the large majority of spyware/adware is installed on PCs. As Apple gets more users, they will get more idiot users, the biggest security flaw affecting Windows.
Posted on Reply
#8
lemonadesoda
Agreed. As soon as Apple users get bored of their pre-installed software, start using download sites or P2P and keygens to install (pirate) software, they open thenselves up to this.

I had to laugh at iAdWare, just like I will laught at iVirus, and iDiots.
Posted on Reply
#9
Dippyskoodlez
lemonadesodaAgreed. As soon as Apple users get bored of their pre-installed software, start using download sites or P2P and keygens to install (pirate) software, they open thenselves up to this.

I had to laugh at iAdWare, just like I will laught at iVirus, and iDiots.
Thing is, aside from limewire.... most mac users don't "want" to find oddball software...... just music.. ;)
Posted on Reply
#10
Muhad
Adware, viruses and anything else secretly put onto a persons computer needs to be taken more seriously. These clowns that do this need to be sent to prison.:shadedshu
Posted on Reply
#11
b1lk1
LOL! Poor Apple users. Looks like your perfect OS is getting the attention it doesn't deserve. Funny how flaws can be found so easily in this perfect OS when people try. Sure this one isn't a major one, but once they start, it will be hacked up like Winblows in no time. HAHAHAHAHAHA!!!!!!!!!!
Posted on Reply
#12
Dippyskoodlez
b1lk1LOL! Poor Apple users. Looks like your perfect OS is getting the attention it doesn't deserve. Funny how flaws can be found so easily in this perfect OS when people try. Sure this one isn't a major one, but once they start, it will be hacked up like Winblows in no time. HAHAHAHAHAHA!!!!!!!!!!
Now if only these flaws didnt involve a large portion of user idiocy to be exploited, unlike windows....... :rolleyes:

Again, reading the post helps you fully understand what it is... Its a THEORETICAL flaw, that has yet to actually be exploited. Chances are it will get a patch before anyone has the chance to find a flaw that allows direct exploitation.

The chances of a zero day impacting os x, or windows is still significantly larger on the windows side, so I really don't see your point.
Posted on Reply
#13
Makaveli
His point is OS X is finally getting the attention from the spyware monkies. its only a matter of time before it gets worse. And he laughs, cause of all the stupid mac zealots who think there OS is untouchable. As the Mac install base gets bigger, more people will start to expliot it.
Posted on Reply
#14
zekrahminator
McLovin
MakaveliHis point is OS X is finally getting the attention from the spyware monkies.
One problem- It's a security firm who found a potential exploit, not a zombie nerd who is actually exploiting it :).
Posted on Reply
#15
Dippyskoodlez
zekrahminatorOne problem- It's a security firm who found a potential exploit, not a zombie nerd who is actually exploiting it :).
Exactly. Its like the police breaking into your house when you're not home, through a secret passage way...

Not exactly helpful to someone wanting to do harm :laugh:
Posted on Reply
#16
Alcpone
zekrahminatorOne problem- It's a security firm who found a potential exploit, not a zombie nerd who is actually exploiting it :).
Fair play F-Secure, thats why I use there software, also I got it for free for 48months through my bank!

:toast:
Posted on Reply
Add your own comment
May 8th, 2025 23:06 EDT change timezone

New Forum Posts

Popular Reviews

Controversial News Posts