|
|
To print: Select File and then Print from your browser's menu
-------------------------------------------------------------- This story was printed from ZDNet Australia. --------------------------------------------------------------
|
Mac OS X adware sample is not a threat By Munir Kotadia and Joris Evers, ZDNet Australia November 29, 2006 URL: http://www.zdnet.com.au/news/security/soa/Mac-OS-X-adware-sample-is-not-a-threat/0,130061744,339272447,00.htm
A new adware program that silently installs on Mac OS X systems and opens Web browser windows is unlikely to create a security problem. The program, dubbed iAdware by Finnish security company F-Secure, is possibly the first example of adware for Macs. It is especially interesting since it doesn't require administrative privileges to nestle itself on computers, according to F-Secure. Paul Ducklin, head of technology for Sophos APAC, told ,ZDNet Australia that generally, adware may be a nuisance but it does have legitimate uses. "Technically, adware or ad-supported software has been available for OS X, Linux and Windows in non-dodgy forms for some time," said Ducklin, who explained that early versions of the popular browser Opera could be defined as adware. "You could pay for [early versions of Opera] or if you want the free version then you will see some adverts. There is nothing fundamentally wrong with ad-supported software," said Ducklin. But F-Secure is concerned because the program is able to install on a Mac even if the logged-in user does not have admin privileges. "We won't disclose the exact technique used here, it's a feature not a bug, but let's just say that installing a System Library shouldn't be allowed without prompting the user," according to the F-Secure blog. "In theory, this program could be silently installed to your user account and hooked to each application you use," according to the F-Secure blog. "This particular sample successfully launched the Mac's Web browser when we used any of a number of applications." Despite this, Sophos's Ducklin pointed out that there is a clear distinction between adware and spyware. "Spyware is something that is stealing information and leaking that to a third party. "Potentially unwanted applications may be legitimate but can pose a security or management risk -- such as peer to peer applications. They make it too easy for someone accidentally to share the wrong files," said Ducklin. Malicious software that targets Mac OS X systems is rare and has been limited largely to proof-of-concept code, instead of actual attacks. However, there are indications that hackers are increasingly targeting the Mac, which experts have said is not impervious to attacks.
Copyright © 2009 CBS Interactive, a CBS Company. All Rights Reserved. |