Tuesday, October 25, 2011

OSX/Tsunami.A Trojan Recruiting Macs for DDoS Attacks

OSX/Tsunami WarningTake your Mac to higher ground!

Researchers over at ESET have discovered a new IRC-controlled backdoor Trojan, OSX/Tsunami.A, seeking out unprotected Macs in order to recruit them into a bot for Distributed Denial of Service (DDoS) attacks.

OSX/Tsunami.A was spawned from a Linux family of backdoors (Linux/Tsunami) that ESET’s been tracking for nearly a decade. The OS X version is based on a 64-bit Mach-O binary instead of Linux ELF binaries and uses different IRC-related information.

Similar to the Linux version, once OSX/Tsunami.A takes residency on your Mac, it taps into a list of IRC servers and channels to listen for commands.

Aside from allowing your Mac to participate in a DDoS attack, OSX/Tsunami.A lets evil-doers to download files – whether they’re updates for Tsunami or other varieties of malware – and execute shell commands, offering the ability to take complete control of your machine.

Thankfully anti-virus firms stay on top of their game and both ESET and Sophos have updated their anti-virus software to detect OSX/Tsunami.

Would your Mac be safe from an incoming Tsunami?

Don’t take that chance of having your Mac drown in a sea of malicious content from a hacker. Make sure you’re running up-to-date antivirus software on your Mac.

Be sure to follow us on Twitter at @hyphenet or “Like” us on Facebook to stay up-to-date on the latest computer security threats.

Photo Credit: epugachev
Edited by Marquisa

No comments:

Post a Comment