Slashdot Log In
Zombie Macs Launch DoS Attack
Posted by
timothy
on Thu Apr 16, 2009 06:50 PM
from the but-wait-you-told-me dept.
from the but-wait-you-told-me dept.
Cludge writes "ZDNet has a story (and several related articles) about how Symantec has discovered evidence of an all-Mac based botnet that is actively involved in a DOS attack. Apparently, security on the exploited Macs (call them iBots?) was compromised when unwary users bit-torrented pirated copies of iWork 09 and Photoshop CS4 that contained malware. From the article: 'They describe this as the "first real attempt to create a Mac botnet" and note that the zombie Macs are already being used for nefarious purposes.'"
Related Stories
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
Are you sure... (Score:5, Funny)
Re:Are you sure... (Score:5, Informative)
Parent
Re:Are you sure... (Score:5, Funny)
Parent
Re:Are you sure... (Score:5, Funny)
Parent
Instant Karma... (Score:5, Insightful)
No, the funny part is that the users who torrented and installed pirated copies of iWork 09 and Photoshop CS4 got exactly what they deserved. Instant karma.
Parent
Re:Instant Karma... (Score:5, Insightful)
"They" got what they deserved? More like we, the internet public at large that has to suffer through botnet DoS attacks, got what we didn't deserve.
Parent
Re:Instant Karma... (Score:5, Informative)
I believe you are wrong in this case though, it's not a Mac that caught a virus, it may or may not be a virus, but it was installed onto the computer by the participating user on purpose. Except the user got a bit more functionality than he 'paid' for.
Parent
Re:Instant Karma... (Score:5, Informative)
vs something that floats around the internet for any 'innocent' networked Mac to catch.
Parent
Re:Instant Karma... (Score:5, Informative)
Fine so it's a Trojan.
Parent
Re:Instant Karma... (Score:5, Insightful)
That's the same story for most Windows malware.
Parent
Re:Instant Karma... (Score:5, Insightful)
This ain't a virus. This is a program, just like any other that you download and run.
Not to say that Macs are "virus-proof" - they aren't. But short of downloading pirated software and running it, there haven't been any attacks so your friends here on Slashdot are still giving you good advice.
Parent
Re:Instant Karma... (Score:5, Insightful)
Parent
Re:Instant Karma... (Score:5, Insightful)
Mod this up. The strongest attack vector is the social engineering vector.
Parent
A matter of time (Score:5, Interesting)
Re:A matter of time (Score:5, Informative)
Parent
it just... (Score:5, Funny)
it just... BBRRRAAAIINNNNSSS
Hey, what a surprise (Score:5, Insightful)
If a user is tricked into installing malware on a machine, the machine is infected with malware.
It's a shame people think Macs are somehow magically protected against viruses and other nasty computer stuff, merely by virtue of the manufacturer and operating system. It's probably more of a shame that Apple has, in the past at least, marketed Macs as being (more?) immune to viruses than PCs - something which somewhat true, but only for statistical reasons.
It's like STDs - if you're careless and go sticking your junk everywhere without taking precautions, you'll probably catch something cruel, eventually.
Re:Hey, what a surprise (Score:5, Insightful)
Correct me if I'm wrong, but a trojan doesn't qualify as a "security issue" on the part of the OS. If a trojan succeeds in compromising the system, it's the fault of the user, not the OS.
Parent
Re:Hey, what a surprise (Score:5, Funny)
It's like STDs - if you're careless and go sticking your junk everywhere without taking precautions, you'll probably catch something cruel, eventually.
That's why I run Linux. Running Linux pretty much rules out any possibility of having sex, and hence any chance of contracting an STD.
Parent
Re:Hey, what a surprise (Score:5, Insightful)
Also, like all linux distros, in order to do any real damage on a mac, you need to enter an admin password
Please stop repeating this fallacy! First, on a single-user system (e.g. the vast majority of home computers), the end user has rights to all the interesting data files (songs, pictures, documents, etc.), so anything running as the user can do significant local damage. Sure, the OS and apps may be protected, but that isn't really what the end user cares about (since that's all easily replaced). However, since the goal of most viruses/worms/trojans is to control the computer for distributed and untraceable nefarious purposes (and not have the owner notice), they don't do that anymore. They cause the computer to join botnets, connect to master control servers, and wait for instructions. Sending spam, scanning other systems for vulnerabilities, hosting fast-flux phishing sites, etc. don't require elevated privilege.
Parent
Um (Score:5, Funny)
So does this mean that Macs are finally Enterprise Ready?
iZombies (Score:5, Funny)
Re:iZombies (Score:5, Funny)
Attack Different.
Parent
Quality of posts (Score:5, Insightful)
It's a shame that the level of intelligence and knowledge of the posters to Slashdot seems to still be in decline.
I would think that anyone who wants to use this "revelation" as some kind of troll against OSX would at least be able to differentiate between a virus and a trojan.
There's a decent chance there will be some kind of unpatched OSX vuln that will be exploited ala what you see on a Windows machine, but until then you should just stew in silence and wait for your opportunity to post your "See OSX is no better than Windows" messages and then you wont look like such ignorant fools.
If you can install software on a computer, you can install software that is malware as well. I doubt anyone can fault Apple for allowing end users to install software that they choose to install.
It should be noted (Score:5, Informative)
that a lot of "pirated" Bit Torrent software contains malware. Not just the Windows versions, but the Mac and Linux and BSD Unix versions as well.
When you download pirated software you take a risk that it contains a trojan.
I've even seen PDF files that had HTML exploits in it that got detected by antivirus. Read the comments on most Bit Torrent web sites the users will complain that it contains a virus. You don't have to download it to test it, the people who already downloaded it will give feedback that it contains a trojan or malware.
When you download pirated software you are taking a big chance, it isn't worth it when a majority of things are infected. That is why I look towards Free and Open Source Software as alternatives to commercial products.
Here is the download for the fix (Score:5, Funny)
Botnet is a botnet (Score:5, Insightful)
Re:Sigh (Score:5, Insightful)
What the hell are you talking about?
Malware ie: trojans have been around for ages. This has nothing to do with the overall security of the OS and everything with the security threat the user is to themselves.
Parent
Re:Sigh (Score:5, Insightful)
Parent
Re:Sigh (Score:5, Informative)
Someone seems to be trying really hard to publicise a minor Trojan threat that has been published and out there since January.
Parent
I've got your denial right here. (Score:5, Insightful)
Purposefully installing malicious software does not indicate a vulnerability. The user intentionally installed a piece of software that is doing exactly what it is designed to do.
There isn't an operating system on the planet that can protect you (or itself) from fraudulent user activity.
Parent
Re:I've got your denial right here. (Score:5, Insightful)
Parent
Re:I've got your denial right here. (Score:5, Insightful)
Parent
Re:I've got your denial right here. (Score:5, Funny)
To summarize: PEBKAC (Problem Exists Between Keyboard And Chair).
Though I'm sure some would rather update that to be PEBMAC (...Mouse And Chair).
Parent
Re:I've got your denial right here. (Score:5, Funny)
Parent
Re:I've got your denial right here. (Score:5, Insightful)
They totally intentionally installed the software. You can't make a machine Malware proof without also making it software proof.
The whole notion of "Malicious Software" is a marketing creation for the sole purpose of making money off people who would rather spend money on software to watch their back than learn (bother) to help themselves.
Anyone who tells you different is confusing the issue. OS X has plenty of problems, this isn't one of them.
Parent
Re:I've got your denial right here. (Score:5, Interesting)
That post also included:
If the operating system was as safe as the crazy fanboys claim, it wouldnt have been able to install malware in the first place.
Which is disingenuous.
Furthermore, the activex part is true only if the user did, in fact, allow them. IE has had many, many vulnerabilities which allowed a malicious site to install ActiveX controls without user intervention (just like Safari has had remote execution flaws which allowed it to be compromised.)
Parent
Re:I've got your denial right here. (Score:5, Funny)
"anyone who trades X for security deserves neither, and shall lose both".
You're talking about the X Window System here, right?
Parent
Re:Sigh (Score:5, Funny)
If your intention is to create a large botnet, you are of course going to target the most popular operating system.
Not exactly. You're going to target the lowest hanging fruit. Which (no pun intended) is steadily becoming an Apple.
Parent
...uneducated Mac fanboyism... (Score:5, Insightful)
I suspect that this botnet has been created by a geek that is sick to death of uneducated Mac fanboyism, and in a small way, I have respect for that.
No, it wasn't. This botnet was created by a computer criminal who saw an opportunity to capitalize on people who install pirated software either because they are to clueless to know the risks or because they have deluded them selves into thinking it is riskless act. The lesson we can all learn from this is the following:
"If you download pirated software off the internet and install it on your computer you run the risk of installing along with it carefully crafted malware that your security software or whatever other precautions you are taking may not be able to protect you against."
Note that this basic lesson is true on all incarnations of Mac OS X, Windows, Linux or any other network enabled operating system you can download pirated software for.
Now please crawl back under your rock and learn to write better trolls...
Parent
Re:Sigh (Score:5, Funny)
It does work that way, in general.
Parent
Re:Sigh (Score:5, Insightful)
I'm just guessing, but I think when he said "Technologically Uneducated Users" he was talking about Mac users, not developers. You might have missed the last 25 years where Macs claim to be more user friendly and cater to a less technologically inclined user-base, lending significant support to his suggestion. In short, not all Mac users fit that profile, but the ones that do are contributing to the negative image that OSX and Macs in general enjoy among a significant portion of the populace. Think "AOL", except replace the service itself with something worthwhile, and decrease the percentage of "Technologically Uninclined/Uneducated" users in the user-base from >99% down to about 80% or less.
More importantly, however, I think that he was implying that the users that claim that Macs are completely impervious to malware and that therefore Mac users need not take any precautions against infection are making the Mac community, and by extension the Mac OS, a laughing stock of the computer technology community. In short, the OS is technologically impressive in many ways, but a vocal portion of the users frequently make claims about it that are factually impossible and socially irresponsible. Not that this is exclusive to Mac, just better advertised and frequently sanctioned by the manufacturer.
Parent
re: Macs and claims of "no viruses" (Score:5, Interesting)
As a long-time Mac (and PC) user myself, I've been known to give someone a "simplified version" of the truth, telling them "you won't have any virus or spyware problems on a Mac".
It's not that I'm some clueless user who doesn't know better. It's that I have a pretty good idea of what the individual does with and expects from their computer. Judging by that, and knowing they're not a very "technical" user to begin with, I know that practically speaking, they really aren't going to need to worry about infections on their Mac.
(So far, just about all of the trojan horses and viruses people mentioned for OS X involved downloading files of unknown origins, or running something you received in an unsolicited email. When you have a user who is already scared to open any email at all from people he/she doesn't know, they're hopefully in good shape there. They're certainly not savvy enough to fire up bittorrent and start seeking out pirated software, either.)
Parent
Re:Sigh (Score:5, Interesting)
Why only desktops? Unix servers have sat on the internet open to the world since well before Windows even had a TCP/IP stack built in. And there are still plenty of them out there sitting on very fat pipes just ripe for bot nets. So why is it that Windows has had far more security hardships then any Unix based OS?
It's not just market share that plays a factor. There have been plenty of exploits for IIS, MSSQL and Windows Server even though those products don't command a 50% market share.
Parent
Re:Sigh (Score:5, Interesting)
Culture. Windows grew up on the desktop and moved into the server. Unix grew up on the server and is trying to make inroads on the desktop. "Normal users" will force unix systems to compromise some of their security to make life easier. Windows has had to compromise by removing the "everybody is an admin--free love for all" that existed all the way up to XP. By default, Vista users aren't running as root and the only way to become root is either a UAC dialog or a privilege escalation exploit.
That doesn't account for the server-end though. And why earlier versions of said products had so many holes I will attribute to culture.
Of course, Linux grew out of a culture that detested any kind of authority. Thus you find gems like this in early Linux documentation [freebsd.org]:
Parent
Re:May I be the first to laugh (Score:5, Interesting)
From what we know so far, apparently the botnet was created by a trojan and does not spread.
I'm a Mac user who doesn't run applications downloaded from completely untrustworthy sources like pirate p2p networks and you're correct -- I don't need a virus or malware checker.
Parent
Re:I'm on a Mac (Score:5, Funny)
Parent
Re:FUD (Score:5, Insightful)
Sounds like someone has their panties in a twist. You might forget that strict permission levels don't imply security when the person behind the keyboard is an idiot.
Parent
Re:unlikely (Score:5, Funny)
What do you expect? It had to find a black turtleneck, offer some snide, unasked for criticism of your iTunes playlist, and order a double-whip, half-caf, non-fat latte before deciding which port was cool enough to grace with its packets. It may not be very effective, but it looks FABULOOOOOOOOOOOOUS!
Parent
Re:Linux. (Score:5, Insightful)
Except this isn't a Virus. It is a Trojan.
Any OS can be infected with a Trojan even Linux.
I find it anoying that under Linux most software really expects to be installed as root.
Maybe there needs to be a new level called app for applications but then you have to problem of libraries.
Parent