X

New Mac Trojan, OSX/Jahlav-C has been discovered

2009 has seen quite an onslaught of malicious software targeting the Mac OS. The siege continues with a new Trojan, OSX/Jahlav-C. This software is most closely associated with the Internet Web site, PornTube, masquerading as an ActiveX object that users m

CNET staff
2009 has seen quite an onslaught of malicious software targeting the Mac OS. The siege continues with a new Trojan, OSX/Jahlav-C. This software is most closely associated with the Internet Web site, PornTube, masquerading as an ActiveX object that users must install to watch the video content on the site.

Common filetypes that are downloaded include:

HDTVPlayerv3.5.dmg
VideoCodec.dmg
FlashPlayer.dmg
MacTubePlayer.dmg
macvideo.dmg
License.v.3.413.dmg
play-video.dmg
QuickTime.dmg
These attacks take advantage of a common Mac-user misconception, "My Mac is always safe." These socially engineered sites aim to lure Mac users into trusting them by making everything appear "Mac-friendly". Once duped, users can be exploited by code running inside the package files. Inherently, Macs are still much safer than PC's, however with the increasing popularity of the Mac OS, expect to see the amount of potentially malicious software increase. 

The best course of action for Mac users is to examine the files they download carefully, especially if you are being asked for your administrator password to install codecs, utilities, or any other unfamiliar application. Most malware resides on disreputable or untrusted Web sites such as pornography sites or in illegally downloaded software packages. Currently there are no self-propagating viruses for the Mac.

Resources
Read this notification about the OSX/Jahlav-C Trojan posted on Mac NN.

Experiencing problems? Have feedback? Let us know!
Follow MacFixIt on Twitter!

Resources

  • notification
  • Let us know!
  • Twitter!
  • More from Late-Breakers