Skip to Content

BitTorrent copies of iWork '09 may contain nasty Trojan

by Christina Warren Jan 22nd 2009 at 10:15AM

Intego has released a security alert for a Trojan horse circulating in copies of iWork '09 downloaded from BitTorrent trackers and direct download (read: not official, but warez-esque) sites. The Trojan, known as OSX.Trojan.iServices.A is actually pretty clever: it exists as a package within the actual iWork '09 installer (meaning you can't see it unless you view every package in the installer bundle). Then when the installation begins and asks for your administrator password (which is what a non-infected version of iWork '09 would do), the Trojan package will install itself as a startup item in the /System/Library/StartupItems folder, where it has root permissions.

Once this service is on your system (and it is called something that sounds innocuous: iWorkSerices), it will connect to a remote server online, making your computer a target for other malicious downloads and remote operations.

It is important to note that the iWork '09 files on these downloads are not affected in any way, they are merely a catalyst to get this Trojan on your system.

Intego has updated their virus definitions for its VirusBarrier programs. We recommend not downloading software from untrustworthy or unofficial sources. And you know, paying for a legitimate iWork license.


View Tags

Related Stories

Categories

Software iWork Security

Intego has released a security alert for a Trojan horse circulating in copies of iWork '09 downloaded from BitTorrent trackers and direct...
 

Add a Comment

Sign in »
*0 / 3000 Character Maximum

56 Comments

Filter by:
Christoph

Hello!!!!

Get the free trial LEGITAMATELY off the Apple website, and then repeat after 30 days. I never needed to type in a password to login to the apple website so they know if i've gotten it or not. That's what I'm doing!

January 24 2009 at 6:44 PM Report abuse rate up rate down Reply
Corey J Feldman

I keep hearing comment like Macs don't get viruses and Trojans. When did apple claim they were immune to Trojans? This isn't a virus and won't be able to replicate and spread to other computers. You download warez and give it your root password, well don't be surprised if you mac goes all zombie on ya!

http:///www.coreyjf.com/blog

January 23 2009 at 1:51 PM Report abuse rate up rate down Reply
Aaron

If you don't want to muck around in the Terminal, SecureMac has released a free app that will remove the Trojan if you have it. It's on the front page of their web site.

January 23 2009 at 9:43 AM Report abuse rate up rate down Reply
Josh

Think logically here, people! If a copy of something on a torrent site has a trojan then someone will say so in the comments (think about it, they will reports on it and check their Mac).

Or do what everyone else said and get the official trial and a serial from a dodgy site.

January 23 2009 at 3:14 AM Report abuse rate up rate down Reply
Dave

and so it begins...

January 23 2009 at 2:13 AM Report abuse rate up rate down Reply
Brian McBride

Not to worry. Macs are immune to viruses. I have seen the ads. Just don't install the software on that fat PC guy!

January 23 2009 at 1:20 AM Report abuse rate up rate down Reply
jjclark

I thought crapple's Mac OS X was immune to viruses and trojans?

Ooops...Now that Apple has made billions of dollars out of you dumb illiterate mac users, now you realize you've been lied to and tricked again by Steve Jobs and his gang of iTards because you didn't bother doing any research. :)

January 22 2009 at 9:06 PM Report abuse rate up rate down Reply
2 replies to jjclark's comment
twistedarts

Are you really that stupid?

January 23 2009 at 2:04 PM Report abuse rate up rate down Reply
Ariel

So if 20000 people have a copy of iWork 09 pirated from one particular source, that says that it's getting a heck of a lot more popular. iWork.com really breaks the boundaries.

January 22 2009 at 6:55 PM Report abuse rate up rate down Reply
Simon Arch

Except that was debunked, and Apple WASN'T recommending Mac users to install AV software.

January 22 2009 at 5:23 PM Report abuse rate up rate down Reply
twistedarts

you know, some of you posters are just as stupid as the author. yeah spread the word about how to be a thief.

January 22 2009 at 4:24 PM Report abuse rate up rate down Reply
Buy an ad here

Hot Apps on TUAW

Tweets

© 2012 AOL Inc. All Rights Reserved.