[Tech] Primo Trojan horse per Mac OS X

Secondo la società di sicurezza informatica Intego, il trojan MP3Concept / MP3Virus.Gen sfrutta una vulnerabilità di OS X che permette a un file eseguibile di "spacciarsi" per un normale file dati, ad esempio un brano in formato MP3.

Intego told MacCentral today that the code is hidden in the ID3 tag of the MP3 file. The code will only activate when clicked, but once it is, Intego warns the Trojan horse has the potential to delete all of a user's personal files; send an e-mail message containing a copy of itself to other users; and infect other MP3, JPEG, GIF or QuickTime files.



Intego also said that the same technique could be used to infect .jpg or .gif files, although no such cases have been found. Intego has released updated virus definitions to combat the Trojan horse.



Symantec Corp. said they were aware of the Trojan, but noted that the virus has not been found in the "wild."

Fonte: MacCentral.