Malware writers stick adverts into Apple browser

Stefan Mileschin · 25th March 2013, 06:21

Malware writers are starting to take the Nintendo when it comes to hacking Apple gear.

While hacking Apple gear is fairly straight forward, once you managed it all you had access to was the user's Coldplay collection. Now it seems that the malware writers have finally found a way to make hacking Apple toys a viable proposition by installing adverts in their browsers.

Russian anti-virus company Doctor Web said that adware for Mac OS X has been increasing in number since the beginning of 2013.

The latest flavour, the Trojan.Yontoo.1, is the most prominent and can download and install an adware browser plugin in an infected system.

The idea is that the criminals profit from affiliate ad network programs, and their interest in users of Apple-compatible toys is growing thanks to a large user base.

Recently discovered, Trojan.Yontoo.1 serves as a pretty striking example of such software.

The trojan gets onto a Mac when the user visits a movie trailer page which asks them to install a browser plugin. Apparently Apple fans fall for this every time.

The prompt imitates a common dialogue displayed when a plugin needs to be installed or additional configuration is necessary. After clicking on 'Install the plug-in', the user is redirected to another site from which Trojan.Yontoo.1 is downloaded.

The trojan can also be downloaded as a media player, a video quality enhancement program or a download accelerator.

We would have thought they get enough clues. When launched, Trojan.Yontoo.1 displays a dialogue window that asks the user if they want to install a "Free Twit Tube". We guess that American Apple users do not know what a twit is.

Browser extensions are detected by Dr Web as Adware.Plugin but since most Apple users still think that malware is only for Windows users and that their toys are unhackable many don't actually own the software.

http://news.techeye.net/security/app...s-into-browser

25th March 2013, 06:21	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 148,447	Malware writers stick adverts into Apple browser Malware writers are starting to take the Nintendo when it comes to hacking Apple gear. While hacking Apple gear is fairly straight forward, once you managed it all you had access to was the user's Coldplay collection. Now it seems that the malware writers have finally found a way to make hacking Apple toys a viable proposition by installing adverts in their browsers. Russian anti-virus company Doctor Web said that adware for Mac OS X has been increasing in number since the beginning of 2013. The latest flavour, the Trojan.Yontoo.1, is the most prominent and can download and install an adware browser plugin in an infected system. The idea is that the criminals profit from affiliate ad network programs, and their interest in users of Apple-compatible toys is growing thanks to a large user base. Recently discovered, Trojan.Yontoo.1 serves as a pretty striking example of such software. The trojan gets onto a Mac when the user visits a movie trailer page which asks them to install a browser plugin. Apparently Apple fans fall for this every time. The prompt imitates a common dialogue displayed when a plugin needs to be installed or additional configuration is necessary. After clicking on 'Install the plug-in', the user is redirected to another site from which Trojan.Yontoo.1 is downloaded. The trojan can also be downloaded as a media player, a video quality enhancement program or a download accelerator. We would have thought they get enough clues. When launched, Trojan.Yontoo.1 displays a dialogue window that asks the user if they want to install a "Free Twit Tube". We guess that American Apple users do not know what a twit is. Browser extensions are detected by Dr Web as Adware.Plugin but since most Apple users still think that malware is only for Windows users and that their toys are unhackable many don't actually own the software. http://news.techeye.net/security/app...s-into-browser

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Apple continues to stick two fingers up at UK Justice	Stefan Mileschin	WebNews	0	7th November 2012 06:46
New Apple adverts alienate everyone	Stefan Mileschin	WebNews	0	31st July 2012 06:47
San Francisco tells Apple to stick it on EPEAT fiasco	Stefan Mileschin	WebNews	0	12th July 2012 09:04
Malware writers go cross platform	Stefan Mileschin	WebNews	0	12th July 2012 08:59
Apple lets malware into its App store	Stefan Mileschin	WebNews	0	9th July 2012 12:55
Android malware writers arrested	Stefan Mileschin	WebNews	0	20th June 2012 07:24
Apple Releases Update to Take Care of Flashback Malware	Stefan Mileschin	WebNews	0	16th April 2012 06:59
Apple releases fix for Flashback malware	Stefan Mileschin	WebNews	0	13th April 2012 07:21
E-mail, Browser, and Calendar... on a Stick!	Sidney	WebNews	0	21st March 2005 13:51
Apple slammed for misleading Power MacG5 adverts	jmke	WebNews	0	11th June 2004 09:02