IMPress Magazine
The publication of the International Press Assoc.


Technology

December 3, 2012

New Apple Mac Trojan Called OSX/Dockster Found in the Wild on Tibetan Website

 

Malware: OSX/Dockster

Risk: Low; the threat is not known to be widespread and the vulnerability targeted by the exploit code is corrected by the latest version of Java.

Description: A sample of a new Mac spyware called OSX/Dockster.A was found on VirusTotal on Friday, possibly as part of a test before pushing it to the public. This trojan has backdoor functionality, including a keylogger component that records an affected user’s typing.

This malware is now known to be in the wild, on a website dedicated to the Dalai Lama that has been compromised to deliver the same exploit code as used by SabPab to push Dockster. (This Java vulnerability was also the same one used by Flashback.)

If it’s executed, the trojan deletes itself from the location where it was run and installs itself in the user’s home directory with the filename .Dockset. The file is not visible through Finder; however, if it’s running, it can be seen within OS X’s Activity Monitor.  It creates a launch agent called mac.Dockset.deman so that the trojan will restart each time an affected user logs in. Once the trojan is active, it tries to contact the remote address itsec.eicp.net to await instructions.

The backdoor functionality of this trojan is quite basic. It provides a simple remote shell which allows the trojan’s controller remote access, allows the controller to download additional files, and it logs keystrokes.

Means of protection: VirusBarrier X6 (www.intego.com/virusbarrier/) protects users from this malware with malware definitions dated November 30, 2012 or later. VirusBarrier X6’s real-time scanner will detect the exploit code as OSX/SabPab.A and OSX/Dockster.A when it is dropped, and its Anti-Spyware protection will block any connections to remote servers if a user has installed the Trojan horse.

VirusBarrier Express and VirusBarrier Plus, available exclusively from the Mac App Store, detect this malware with malware definitions dated November 30, 2012 or later, but these programs do not have a real-time scanner due to limitations imposed by the Mac App Store; users should scan their Macs after they have updated to the latest malware definitions, or manually scan any installer packages they have downloaded if they seem suspicious.

For additional protection against this threat, update to the latest version of Java, which has fixed this vulnerability.


Did you enjoy this article? If so, please click on our Facebook Like button and visit our page on FB too.

Interested in becoming part of our IMPress Staff? Would you like to cover major trade shows, concerts, sports and travel and have your articles appears on IMPress just like the ones you have just read?

If you would, then visit our main site at internationalpress.com and find out how.

Subscribe To Our Feed and be alerted to our new articles by email.

Print Friendly, PDF & Email
Share


About the Author

pressrelease
pressrelease
If your company has press releases that you feel will be of interest to our readers, send your request for approval for our free service to press@ipaimpress.com. If approved your releases will appear in our IMPress publication.




 
 

 

2019 QuickChek Festival of Ballooning Huge Success

The New Jersey QuickChek Festival of Ballooning is the largest festival of its kind in the state of New Jersey. Held each year at the Soldberg Airport in Readington, NJ, this festival boasts over 100,000 visitors and hundreds ...
by Len Rapoport
0

 
 
Puerto Rican Children Dancers

New York’s 2019 Puerto Rican Day Parade, We Love Parades

We cover many events in New York City but love to cover parades. This article with photos and videos highlight the Puerto Rican Parade on 5th Ave. in New York. Thousands lined the streets to watch the hundreds of participants.
by Len Rapoport
0

 
 

New York International Auto Show 2019 – FREE Images & Video Clips

Our coverage of the 2019 NY International Auto Show at the Javits Convention Center. Loads of photos and video clips in our article featuring some of the hot new concept cars. This is the article you want to read and you can ...
by Len Rapoport
0

 

 

New York’s 2019 Persian Day Parade-Smaller But Colorful

IPA president Len Rapoport, president of the International Press Association covers the 2019 Persian Day Parade in New York City. This parade celebrates the Iranian New Year Nowruz. 98 images you can download and print of the p...
by Len Rapoport
0

 
 

New York’s St. Patrick’s Day Parade-2019

The 2016 NYC St. Patrick's Day Parade on 5th Avenue. IMPress Magazine with Andy Peeke and Len Rapoport covered the parade for IMPress Magazine an International Press Association publication. Over 150,000 marched in the parade...
by Len Rapoport
0

 

 

International Beauty Show 2019 Draws Thousands

ach year we attend the International Beauty Show, with a sense of discovery. We ask ourselves, what will be the next big trend for the beauty industry this year? We also wonder if they can top the previous years shows in both e...
by Len Rapoport
0

 



0 Comments


Be the first to comment!


You must be logged in to post a comment.