{"id":47276,"date":"2012-04-05T14:20:01","date_gmt":"2012-04-05T12:20:01","guid":{"rendered":"http:\/\/mybroadband.co.za\/news\/?p=47276"},"modified":"2012-04-05T14:25:37","modified_gmt":"2012-04-05T12:25:37","slug":"beware-mac-malware-have-you-been-infected","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/47276-beware-mac-malware-have-you-been-infected.html","title":{"rendered":"Beware: Mac malware – have you been infected?"},"content":{"rendered":"

Russian anti-virus vendor, Doctor Web has found that a trojan disguised as a flash installer has infected at least 600,000 Apple<\/a> Mac computers, including 274 machines from Cupertino where Apple is headquartered.<\/p>\n

Most of the machines infected by the BackDoor.Flashback trojan are located in the US (56.6%) and Canada (19.8%), with Doctor Web reporting that the UK is in third place (12.8%) and Australia in fourth with 6.1%.<\/p>\n

According to Doctor Web, attackers began using two different Java vulnerabilities to spread the malware in February 2012, but switched to another exploit after March 16.<\/p>\n

Oracle reportedly patched the vulnerability in February already, but Apple only issued the fix to close the hole on April 3 2012.<\/p>\n

The exploit saves an executable file onto the hard drive of the infected Mac machine, Doctor Web explained. The file is used to download malicious payload from a remote server and to launch it.<\/p>\n

\"Flashback

Dr Web analyst tweets new numbers, Cupertino and Finland stats<\/p><\/div>\n

Doctor Web said the launched malware first searches the hard drive for the following components:<\/p>\n