Skip to Content

New Mac OS X malware - OSX_LAMZEV.A

Computer security company Trend Micro is reporting that a new Mac OS X malware application is making the rounds. The application, called OSX_LAMZEV.A, gives hackers a way to take control of infected Macs. This is the second report of Mac OS X malware this week.

This is not a virus, and users must actually launch the app for it to install its payload. Once running, the app also asks which firewall port it can use. Trend Micro reports that "Mac users may be infected when they access remote websites hosting this backdoor. The backdoor may also be disguised as a legitimate application and may be installed and executed on systems."

Many Mac OS X-based malware seems to be similar in nature, requiring users to actually launch the installer and give it permission to install the payload. Unlike Windows-based malware, you shouldn't need to install any anti-malware apps to annoy you and slow down your Mac. Just make sure to follow the basic rules of Internet safety -- don't install applications that aren't legitimate or visit Web sites that you don't trust.

For more details, be sure to visit the Trend Micro Virus Encyclopedia.

Categories

Software Security

Computer security company Trend Micro is reporting that a new Mac OS X malware application is making the rounds. The application, called...
 

Add a Comment

*0 / 3000 Character Maximum

23 Comments

Filter by:
Sir. Poopy Pants

@strey0123

LOL, I am in fact a Apple consumer and an OS X fan. Fact is, market share has an affect on which platforms malware writers target. Who would write malware for windows, even if it was easy, if Windows had 10% of the market? Much more effort would be put into targeting the OS most people use and thus where the real money is at.

Why don't you cool your hot head with a tall glass of kool-aid.

November 23 2008 at 11:09 AM Report abuse rate up rate down Reply
1 reply to Sir. Poopy Pants's comment
Tony

@Jesse,

Sorry, but the facts say otherwise. See the previous comment.

November 23 2008 at 4:57 PM Report abuse rate up rate down Reply
Martin

It's still a little disconcerting to find this on my system and have it come up and ask me if for the confirmation about running it... I just searched lamzev in spotlight and it came back with file in my cache from last night that implied it was downloaded via an engadget link when I visited their site last night... (I'm not saying I got it from there, because I could never prove it - but the url was theirs in the popup that came up)

November 22 2008 at 7:58 AM Report abuse rate up rate down Reply
K

Windows Malware/Viruses: Ninjas in the night come in through your many open windows, and steal everything without you knowing. They also kill your cat.

Mac Malware/Viruses: A man knocks on your door asking for a copy of your house keys, asking when you won't be home today, and if you wouldn't mind him being over. He assures you he is a good person.

November 22 2008 at 7:41 AM Report abuse rate up rate down Reply
Samuel. P Winter

In my opinion, an application that actually requires you to install it, asks which firewall port it can use, and doesn't attempt to hide its presence in the filesystem is not really malware..

The Windows malware situation is really bad because of the fact that many of the malicious spyware/virus applications exploit security holes in internet explorer (usually in the activeX layer), browser plugins, and other common apps/services so they can install themselves on to the system without user intervention ( "drive-by installation") other than perhaps visiting a rogue website.

November 21 2008 at 7:11 PM Report abuse rate up rate down Reply
2 replies to Samuel. P Winter's comment
James

Exactly. This is more like voluntary euthanasia.

November 22 2008 at 7:24 AM Report abuse rate up rate down Reply
ian

In which case, none of the top ten security threats to Windows machines are malware, either.

Mac users have a very skewed view of the Windows security threat scene. What they don't often realise is that very, very few pieces of Windows malware rely on security holes in Windows. Instead, they target the biggest security hole on any platform - the one between the user's ears.

Why? Simple - that hole can't be patched by Microsoft or anyone else.

My worry is that lots of newer and/or less wise Mac owners "believe the hype" that the Mac is immune to *all* forms of malware, and so take risks which they wouldn't on a less secure platform. If you really believe that there's no way you can make Mac malware, why would you bother about running that executable file "your friend" has just sent you...

November 22 2008 at 3:27 PM Report abuse rate up rate down Reply
Sir. Poopy Pants

Get use to it. Expect to see more maliciously crafted code targeting OS X and Mac users as time goes on and market share goes up.

November 21 2008 at 4:54 PM Report abuse rate up rate down Reply
2 replies to Sir. Poopy Pants's comment
srey0123

Market share is the strawman argument of the haters. This argument is irrelevant. Go home, troll.

November 22 2008 at 12:30 AM Report abuse rate up rate down Reply
Tony

Yes, the market share argument is a straw man often trotted out by those who don't know what they're talking about.

The simple fact of the matter is, back in the pre-OS X days the Mac had *many* viruses and malware (hundreds of them) that were actually out in the wild and infecting machines. In the OS 9/8/7 days, most Mac users had anti-virus software installed. Norton Anti-Virus was one of the best selling software packages on the Mac. All of this when the Mac had a MUCH smaller market share of an overall much smaller market. This simple fact absolutely obliterates the "market share" straw man.

November 23 2008 at 4:55 PM Report abuse rate up rate down Reply
Steve

Many of my files are private and require no root access to distribute should an application decide it wants to upload all my data to some obscure location. Don't be fooled that just because it requires no authenticated access that it cannot cause damage.

November 21 2008 at 4:25 PM Report abuse rate up rate down Reply
Matt Kern

So, if this works with firewire ports new Macbook owners need not worry, eh?

I finally understand why Apple would literally spend millions in R&D to later abandon a technology that they not only created, but is loved by users. It all makes sense.

November 21 2008 at 3:41 PM Report abuse rate up rate down Reply
2 replies to Matt Kern's comment
TheBasslineFiend

I think you should re-read the article... specifically the 2nd paragraph. Firewire isn't even mentioned in passing here.

November 21 2008 at 4:07 PM Report abuse rate up rate down Reply
Matt Kern

Haha... I misread firewall for firewire. I thought I was being funny, and now I just look like a jackass that can't read.

November 21 2008 at 4:13 PM Report abuse rate up rate down Reply
Quine

Wow. So you basically have to give just about anything access to your comp to allow this, then provide a valid port. All it does is put a file or two in app bundles too, which can just be removed with a shell script.

Epic Fail.

November 21 2008 at 3:30 PM Report abuse rate up rate down Reply
Luke Anderson

Hmmm.... I'm getting a Mac and now hearing about this :S
Oh well - still gonna get one!

November 21 2008 at 3:08 PM Report abuse rate up rate down Reply
1 reply to Luke Anderson's comment
Matt Kern

I don't think you read the article correctly. YOU HAVE TO MANUALLY INSTALL THIS MALWARE. This means that you shouldn't be concerned about it. That is unless you are beyond stupid, then you should be concerned.

November 21 2008 at 3:43 PM Report abuse rate up rate down Reply
Ebel3003

I'll begin worrying as soon as you don't need to be completely computer illiterate to become infected.

November 21 2008 at 2:45 PM Report abuse rate up rate down Reply
Buy an ad here

Hot Apps on TUAW

Tweets

© 2012 AOL Inc. All Rights Reserved.