Threat Level: green Handler on Duty: Basil Alawi S.Taher  SANS
ISC InfoSec Handlers Diary Blog  Sign Up for Free!   Forgot
Password? Log In or Sign Up for Free!  iWork 2009 Trojan
Published: 2009-01-23 Last Updated: 2009-01-23 13:53:29 UTC by
Joel Esler (Version: 4) 0 comment(s)  It's already pretty widely
reported in the media, take for instance here and here.  First
reported by Intego, this trojan apparently is distributed by
downloading Bittorrented copies of iWork 2009 from the Internet
and installing them.  The Trojan is installed as part of the
software package, by, yup, you guessed it, you giving the
software permissions to install by giving it your password.
Apparently this backdoor opens a hole on your computer,
reporting back to a central server in order to allow the
attacker to connect and issue commands to your system.  So, what
can we learn from this?  1)  If you Bittorrent software you are
supposed to buy, and break the law in doing so...  you have to
deal with the ramifications...  2)  Hey, y