Of course. New malware never seen in the wild has been "discovered" by an anti-virus company, whose product has been updated to detect it.

It's like a home alarm company representative "coincidentally" calls you the day after a rock gets thrown through your window.

I've always wondered about malware and viruses NOT in the wild, that have been discovered...hmmm.

Someone should sue Apple for all that false advertising. "Oh the Mac does not get viruses...." Riiiiight. If someone thinks this is a rare occurrence, this is only the beginning for Mac bases malware, trojans and viruses. Welcome to the +10% club!

We hear this crap all the time from companies that coincidentally sell anti-virus software.

It's called FUD.

Originally Posted by tonton


Of course. New malware never seen in the wild has been "discovered" by an anti-virus company, whose product has been updated to detect it.
It's like a home alarm company representative "coincidentally" calls you the day after a rock gets thrown through your window.

I'm fine with any non-malicious entity that helps Apple find and patch security flaws, and I don't mind them making money selling anti-virus software, although I agree their tactics are rather manipulative.

I would just find these 'security experts' to be more helpful to send this stuff to Apple to fix, than posting how-to's to the public.

To protect yourself from this, you can do the following:

1. Block IP address 176.58.100.37 with a firewall.
2. Create locked dummy files with the same filenames and put them it the appropriate folders.

Originally Posted by exca1ibur


I would just find these 'security experts' to be more helpful to send this stuff to Apple to fix, than posting how-to's to the public.

Some times making these public inspires much quicker action. In a way I don't mind some profit being made either. Why would anybody spend so much time finding security flaws like this just because they want to be nice to Apple?

Originally Posted by chefpastry


To protect yourself from this, you can do the following:
1. Block IP address 176.58.100.37 with a firewall.
2. Create locked dummy files with the same filenames and put them it the appropriate folders.

Wouldn't it be wise to assume that there are variants of this that use different IP addresses?

"The trojan, called Crisis, ... appears to be able to bypass OS X security features and install itself with no user interaction."

A contradiction in terms there that reveals some highly likely self-advertising using scare-mongering tactics.

Technically, if it installs with no user interaction it's a virus, not a Trojan. There's something about this malware's delivery method that they have kept out of this announcement.

Add to that discrepancy the fact that "it hasn't been seen in the wild", and it begins to unravel as a vendor's laboratory product that coincidentally it has "updated its VirusBarrier X6 software to guard against".

Pull the other leg, Intego, it's got bells on it...