Adware penetrates OS X

Proof-of-concept code could run without user knowledge

Shaun Nichols in California

Security researchers have found proof-of-concept code for an adware program that targets Apple's OS X operating system.

According to security firm F-Secure, the application does not target a security flaw or bug in the operating systems code. Instead, the adware installs itself through a feature in OS X that allows system libraries to be installed without notifying the user.

Advertisement

While installers require user permission to run in Mac OS X, system library files can be copied onto a machine without ever prompting the user for permission, according to David Frazer, F-Secure's director of technology services.

"It can be seamlessly installed," Frazer told vnunet.com. "When you install the library it doesn't require administrator rights."

The proof of concept that F-Secure tested would automatically launch a browser window every time the user opened an application. It could potentially be used to expose users to unwanted advertisements.

F-Secure has not released details about how the exploit works or what components it targets in the hope that Apple will fix the issue before any malware reaches the public.

"The idea behind this is that there is a vulnerability that right now isn't exploited as such, but it has the potential," said Frazer.

The company hopes that Apple will issue an update for Mac OS X that will force the system to get user permission before it installs system libraries on the machine.

F-Secure's posting comes in a month that has seen the release of several other pieces of proof-of-concept code targeting Mac OS, challenging the common notion that Apple's operating system is less vulnerable to malware attacks.

"For a long time now Mac users have had the feeling that malware is only going to the PC market. This could potentially open the risk for scams that Mac users never see," said Frazer.

Apple did not return requests for comment.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Related whitepapers

Related jobs

Most watched

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

Xperia X1

Video Review: Sony Ericsson Xperia X1

First Looks Editor Ian Williams gets hands on with the Sony Ericsson Xperia X1

IT white papers

Search white papers

Top categories

Poll

Poll: Summer smartphones

Poll: Summer smartphones

Which smartphone will you be taking to the beach this summer?

View poll results

Advertisement

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Spotlight

Google Chrome

Microsoft has no need to worry about Chrome OS

Redmond may actually welcome the new arrival

Dr Aladdin Ayesh

Is it time for the Turing Test to retire?

It is nearly 60 years since Alan Turing devised a...

Security double standards

Broadband provider Tiscali has launched new figures showing an alarming...

Beach

Top 10 holiday gadgets

A wry look at the must-have beach items for any...

Primary Navigation