(1)

> One public reference may be found here:
>
> http://discussions.apple.com/thread.jspa?messageID=5709418

Interesting. Thanks.

> > But has anyone detected any Macs that are infected with the
> trojan?

It's because of the paucity of actual "infections" that vendors are
categorizing this as low-impact. However, the significance of this thing is
more potential than actual. What F-Secure are highlighting is that the crims
have expended real effort and are -not- losing interest. I know some people
are concerned that this has become an excuse for anti-Mac propaganda and
negative publicity for non-issues, but it would be a pity to let that mask
the real risk. I've blogged on that at blogs.securiteam.com, if that's of
interest to anyone.

> > I'm not aware of any, and some of the lists I'm on are
> pretty cutting
> > edge WRT botnets.

Likewise. Unsurprisingly, as we're both on quite a few of those lists...

(2)

An issue that isn't directly relevant to this Trojan: one of my publishers
is proposing a book on OS X security. I know this list includes some people
who could add real value to the project: if you're interested, drop me a
line and I'll put you in touch with someone.

Parrot trainers need not apply.

--
David Harley
AVIEN Interim Administrator: http://www.avien.org
http://www.smallblue-greenworld.co.uk

[ reply ]