homepage Welcome to WebmasterWorld Guest from
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Pubcon Platinum Sponsor 2014
Home / Forums Index / WebmasterWorld / The Macintosh Webmaster
Forum Library, Charter, Moderators: travelin cat

The Macintosh Webmaster Forum

Spyware reported on Mac OS
OSX/OpinionSpy malware requests your OS password

WebmasterWorld Senior Member 10+ Year Member

Msg#: 4147705 posted 4:00 pm on Jun 6, 2010 (gmt 0)

Intego claims to have "discovered a spyware application that is installed by a number of freely distributed Mac applications and screen savers found on a variety of websites. This spyware, OSX/OpinionSpy, performs a number of malicious actions, from scanning files to recording user activity, as well as sending information about this activity to remote servers and opening a backdoor on infected Macs."
OSX/OpinionSpy is installed by a number of applications and screen savers that are distributed on sites such as MacUpdate, VersionTracker and Softpedia. The spyware itself is not contained in these applications, but is downloaded during the installation process. This shows the need for an up-to-date anti-malware program with a real-time scanner that can detect this malware when it is downloaded by the original application’s installer.

SANS reported on this, but I found the comments on their post here interesting:
I share the concerns of this poster:
What bugs me most is that Intego found this spyware, yet refuses to tell how to detect if you're infected, and how to remove, other than buying (or using) their virus scanner.

The Washington Post said it pretty well:
The relative obviousness of this one Mac trojan doesn't make Apple's platform invulnerable--for evidence to the contrary, see the successful attacks demonstrated against fully-patched versions of OS X at the annual Pwn2Own security conference.



Msg#: 4147705 posted 4:44 am on Jun 10, 2010 (gmt 0)


you could try this program: [macscan.securemac.com...]
it is not free but there is a free trial. it does seem to work well at finding spy ware, but i have not seen the spyware that you are speaking of come up before.



Global Options:
 top home search open messages active posts  

Home / Forums Index / WebmasterWorld / The Macintosh Webmaster
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved