IBotnet is a computer virus targeted at Mac computers. Discovered by a couple of Symantec researchers, the Trojan horse-type program has infected a few thousand Macs since it was first reported in January 2009. Analysts have speculated that since Mac users are growing in numbers they have become targets for malicious software programs.CNN.com: Experts: Malicious program targets Macs (April 22, 2009)
IBotnet Background
Discovered in January 2009 by two Malware hunters at Symantec, the IBotnet has two variants that have been encoded in copies of iWork ’09 and Adobe Photoshop CS4. The iWork and Photoshop programs with IBotnet were found on BitTorrent, and as of April 2009, have only infected a few thousand users. Due to the disproportional number of Mac versus PC users, programmers that construct Malware typically target PCs. However, analysts have stated that the IBotnet may indicate a paradigm shift in the type of Malware polluting the web.
References
Fast Facts
-
Fact:
Discovered by Malware hunters at Symantec
-
Fact:
Mario Ballano Barcena and Alfredo Pesoli found two malware variants of IBotnetZDNet: iBotnet: Researchers find signs of zombie Macs (April 16, 2009)
-
Malware variants
-
Fact:
The variants can be found in fraudulent copies of iWork ’09 and Adobe Photoshop CS4ZDNet: iBotnet: Researchers find signs of zombie Macs (April 16, 2009)
-
Fact:
-
Fact:
-
Fact:
The infected programs were shared on BitTorrent
-
Fact:
First discovered in January 2009
-
Fact:
Barcena and Pesoli published a report on IBotnet in the April 2009 issue of Virus Bulletin
-
Fact:
-
Fact:
ARS Technica reports that removing /System/Library/StartupItems/DivX and/or /System/Library/StartupItems/iWorkServices may helpARS Technica: Evidence suggests first zombie Mac botnet is active (April 16, 2009)
