Hellish Mac Malware

Intego have announced that they’ve found a new Mac malware variant.

The malware in question has bot/backdoor functionality, and they identify it as OSX/HellRTS.D. While this malware hasn’t been found in the wild (i.e. on a victim’s machine) as yet, it has been widely distributed on certain forums, so it’s likely that there will be attempts to establish it as “live” feral malware. That doesn’t mean they’ll succeed, of course, but the software sounds quite sophisticated (I haven’t yet seen a sample), and in my experience, Intego are very reliable as a source of information.

Tip of the hat to Kevin Townsend for drawing my attention to the press release.

David Harley FBCS CITP CISSP
Mac Virus
Small Blue-Green World
AVIEN Chief Operations Officer
ESET Research Fellow & Director of Malware Intelligence

Also blogging at:
http://www.eset.com/blog
http://avien.net/blog/
http://smallbluegreenblog.wordpress.com/
http://blogs.securiteam.com
http://blog.isc2.org/
http://dharley.wordpress.com
http://chainmailcheck.wordpress.com
http://amtso.wordpress.com