Reply to topic  [ 13 posts ] 
Mac Malware screensavers 
Author Message
What's a life?
User avatar

Joined: Thu Apr 23, 2009 8:25 pm
Posts: 10691
Location: Bramsche
Reply with quote
It seems that a bunch of free screensavers have been infected with OS X/OpinionSpy.

http://www.zdnet.com/blog/security/malw ... ag=nl.e589

http://blog.intego.com/2010/06/01/integ ... lications/

Quote:
According to the Intego’s security alert, despite the fact that the “market research” program also known as RelevantKnowledge, claims to collect only browsing and purchasing information, a deeper investigation reveals a much more intrusive approach.

More details on what the spyware does once it’s executed, and the list of the screensavers bundled with it:

* It opens an HTTP backdoor using port 8254
* It injects code, without user intervention, into Safari, Firefox and iChat, and copies personal data from these applications. Code injection is a form of behavior similar to that of a virus, and this malware “infects” applications when they are running to be able to carry out its operations. (It infects the applications’ code in the Mac’s memory, and does not infect the actual applications’ files on the user’s hard disk.)
* It regularly sends data, in encrypted form, to a number of servers using ports 80 and 443. It sends data to these servers about files it has scanned locally, and also sends e-mail addresses, iChat message headers and URLs, as well as other data. This data may include personal data, such as user names, passwords, credit card numbers, web browser bookmarks, history and much more
* If a user deletes the original application or screen saver that installed this spyware, the spyware itself will remain installed and continue to operate.


This is a well known Windows spyware module, which looks like it has now been ported to OS X. :(

Mish Inc's FLV to MP3 converter software is also "infected".

(This is deliberately included in a software bundle to help generate revenue for free software - by spying on the users.)

_________________
"Do you know what this is? Hmm? No, I can see you do not. You have that vacant look in your eyes, which says hold my head to your ear, you will hear the sea!" - Londo Molari

Executive Producer No Agenda Show 246


Thu Jun 03, 2010 10:04 am
Profile ICQ
Spends far too much time on here
User avatar

Joined: Thu Apr 23, 2009 11:36 pm
Posts: 3527
Location: Portsmouth
Reply with quote
Oooooh nasty nasty!

I don't know much about code injection - I will have to go and Wiki it - but could Apple potentially patch the OS to stop code injection nastiness like this?

_________________
Image


Thu Jun 03, 2010 10:40 am
Profile
Legend
User avatar

Joined: Fri Apr 24, 2009 2:02 am
Posts: 29240
Location: Guantanamo Bay (thanks bobbdobbs)
Reply with quote
I do not use screen savers. My screen goes into energy saving mode very quickly. Though it is good to be aware of such problems.

_________________
Do concentrate, 007...

"You are gifted. Mine is bordering on seven seconds."

https://www.dropbox.com/referrals/NTg5MzczNTk

http://astore.amazon.co.uk/wwwx404couk-21


Thu Jun 03, 2010 11:26 am
Profile
Moderator

Joined: Thu Apr 23, 2009 6:13 pm
Posts: 7262
Location: Here, but not all there.
Reply with quote
I use the built-in screen saver engine to show slideshows of images. I haven't downloaded anything to do that.

Still, nasty.

_________________
My Flickr | Snaptophobic Bloggage
Heather Kay: modelling details that matter.
"Let my windows be open to receive new ideas but let me also be strong enough not to be blown away by them." - Mahatma Gandhi.


Thu Jun 03, 2010 12:32 pm
Profile
Spends far too much time on here

Joined: Fri Apr 24, 2009 9:44 pm
Posts: 4860
Reply with quote
i have downloaded a few screen savers and other things over time so i just done a scan …

----------- SCAN SUMMARY -----------
Known viruses: 793605
Engine version: 0.95.3
Scanned directories: 1672
Scanned files: 8516
Infected files: 0
Data scanned: 1880.15 MB
Data read: 14620.06 MB (ratio 0.13:1)
Time: 308.387 sec (5 m 8 s)

No infected files were found.

just to be on the safe side …

_________________
Hope this helps . . . Steve ...

Nothing known travels faster than light, except bad news ...
HP Pavilion 24" AiO. Ryzen7u. 32GB/1TB M2. Windows 11 Home ...


Thu Jun 03, 2010 2:07 pm
Profile
Legend

Joined: Sun Apr 26, 2009 12:30 pm
Posts: 45931
Location: Belfast
Reply with quote
Do we actually need screensavers these days; what has me thinking they make next to no difference on an LCD screen now? :?

Not that you shouldn't have one if you like the image(s) displayed... I just use the power saving mode in XP as I'm not really fussed either way :)

_________________
Plain English advice on everything money, purchase and service related:

http://www.moneysavingexpert.com/


Thu Jun 03, 2010 2:22 pm
Profile
Moderator

Joined: Thu Apr 23, 2009 6:13 pm
Posts: 7262
Location: Here, but not all there.
Reply with quote
Actually, I do have screen burn on my LCD. It's faint, but it's definitely there. This screen must be getting on for seven years old now. :lol:

_________________
My Flickr | Snaptophobic Bloggage
Heather Kay: modelling details that matter.
"Let my windows be open to receive new ideas but let me also be strong enough not to be blown away by them." - Mahatma Gandhi.


Thu Jun 03, 2010 2:31 pm
Profile
Spends far too much time on here
User avatar

Joined: Thu Apr 23, 2009 11:36 pm
Posts: 3527
Location: Portsmouth
Reply with quote
My screensave comes on for 1 minute before the screen goes into standby. Just as a warning really, because if the screen were to just flick off while I was reading something that would annoy the hell out of me! It takes a good few seconds to turn back on.

_________________
Image


Thu Jun 03, 2010 5:18 pm
Profile
Legend
User avatar

Joined: Fri Apr 24, 2009 2:02 am
Posts: 29240
Location: Guantanamo Bay (thanks bobbdobbs)
Reply with quote
pcernie wrote:
Do we actually need screensavers these days; what has me thinking they make next to no difference on an LCD screen now? :?

Not that you shouldn't have one if you like the image(s) displayed... I just use the power saving mode in XP as I'm not really fussed either way :)

I dont think so. I have my energy saving mode kick in within a minute of inactivity when the screen dims and a few minutes later it goes dark.

_________________
Do concentrate, 007...

"You are gifted. Mine is bordering on seven seconds."

https://www.dropbox.com/referrals/NTg5MzczNTk

http://astore.amazon.co.uk/wwwx404couk-21


Thu Jun 03, 2010 9:50 pm
Profile
What's a life?
User avatar

Joined: Thu Apr 23, 2009 8:25 pm
Posts: 10691
Location: Bramsche
Reply with quote
pcernie wrote:
Do we actually need screensavers these days; what has me thinking they make next to no difference on an LCD screen now? :?

Not that you shouldn't have one if you like the image(s) displayed... I just use the power saving mode in XP as I'm not really fussed either way :)

They don't "burn in", like CRTs used to, but the image can persist for a long time.

On my old LG 20.1" TFT, if I played Anarchy for 8 hours, afterwards, the screen would need about 12 - 24 hours for the static elements from the UI to stop ghosting (dark shadow) on the screen. It isn't burn in, like the old CRTs used to get, but some panels do suffer this temporary ghosting effect.

_________________
"Do you know what this is? Hmm? No, I can see you do not. You have that vacant look in your eyes, which says hold my head to your ear, you will hear the sea!" - Londo Molari

Executive Producer No Agenda Show 246


Fri Jun 04, 2010 4:27 am
Profile ICQ
What's a life?
User avatar

Joined: Fri Apr 24, 2009 10:21 am
Posts: 12700
Location: The Right Side of the Pennines (metaphorically & geographically)
Reply with quote
I think the last time I used a screensaver was in the 90's.

_________________
pcernie wrote:
'I'm going to snort this off your arse - for the benefit of government statistics, of course.'


Fri Jun 04, 2010 12:25 pm
Profile WWW
Legend
User avatar

Joined: Fri Apr 24, 2009 2:02 am
Posts: 29240
Location: Guantanamo Bay (thanks bobbdobbs)
Reply with quote
l3v1ck wrote:
I think the last time I used a screensaver was in the 90's.

Ditto

_________________
Do concentrate, 007...

"You are gifted. Mine is bordering on seven seconds."

https://www.dropbox.com/referrals/NTg5MzczNTk

http://astore.amazon.co.uk/wwwx404couk-21


Fri Jun 04, 2010 2:45 pm
Profile
Moderator

Joined: Thu Apr 23, 2009 6:13 pm
Posts: 7262
Location: Here, but not all there.
Reply with quote
I use the screensaver as a slideshow function. I may be working at my desk, but I'd like something attractive happening on my screen - especially useful in the winter months when it's dark out and the view from the window is less than inspiring.

I have been borrowing images from the Astronomy Picture of the Day web site for some years, and I've got different sets of space and astronomy images I can call on.

In a commercial environment, I've used the screensaver as a rolling portfolio of stuff when clients visited. It's not just about saving the screen.

_________________
My Flickr | Snaptophobic Bloggage
Heather Kay: modelling details that matter.
"Let my windows be open to receive new ideas but let me also be strong enough not to be blown away by them." - Mahatma Gandhi.


Fri Jun 04, 2010 2:53 pm
Profile
Display posts from previous:  Sort by  
Reply to topic   [ 13 posts ] 

Who is online

Users browsing this forum: No registered users and 13 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group
Designed by ST Software.