Malware, Vulnerability Management

More Mac security updates to extinguish Flashback trojan

Share

To further stop the spread of the Flashback trojan, Apple on Monday released two security updates for Mac OS X 10.5 (Leopard). The updates target those users who have not upgraded to more recent versions of the platform, which already have been fixed for the Java vulnerability that Flashback exploits. While one of the new updates disables Safari's Java plug-in, the other addresses Flashback itself, scanning a users' hard drive for variants of the malware and removing them. The updates can be applied through the built-in Software Update feature. In light of the outbreak, rumors have flown that Apple has sought security help from Kaspersky Lab, but the Russian anti-virus vendor has denied this.

Related

Updated TrickMo Android trojan emerges

Attacks involved the utilization of a fraudulent Google Chrome app, which when installed triggers a prompt for updating Google Play Services and eventually downloads TrickMo as "Google Services" before seeking the approval of accessibility permissions.

Novel malware attack conducts kiosk mode credential theft

Attacks as part of the campaign, which commenced in late August, involved the Amadey malware spreading a credential-flushing AutoIT script, which would launch a URL for replacing Google account passwords in kiosk mode and establish parameters that would prevent user escape via the F11 and Escape keys, an analysis from OALABS revealed.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.