Bootleg iWork ’09 Installer Contains Trojan Horse

Rob Griffiths:

Intego, makers of VirusBarrier and other security software for the Macintosh, issued a security alert for Mac users on Thursday, advising them about the existence of a new Trojan Horse, which they’ve named OSX.Trojan.iServices.A. This new Trojan Horse can be found in pirated copies of Apple’s iWork ’09 application suite, which has been downloaded over 20,000 times, according to Intego’s numbers.

You’ve got nothing to worry about unless you installed a bootleg copy of iWork from BitTorrent. If you do you have something to worry about, Intego’s description of the Trojan horse says it’s installed at /System/Library/StartupItems/iWorkServices.

★ Friday, 23 January 2009