Security & Privacy

Intego today released a security memo about a new Mac OS X Trojan horse, OSX.Trojan.PokerStealer.

The Trojan horse, when run, activates ssh on the Mac on which it is running, then sends the username and password hash, along with the IP address of the Mac, to a server. It asks for an administrator’s password after displaying a dialog saying, “A corrupt preference file has been detected and must be repaired.” Entering the administrator’s password enables the program to accomplish its tasks. After gaining ssh access to a Mac, malicious users can attempt to take control of them, delete files, damage the operating system, or much more.

Read the full security memo here.