<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Marcos Christodonte II - Information Security Blog &#187; mac os x</title>
	<atom:link href="http://christodonte.com/tag/mac-os-x/feed/" rel="self" type="application/rss+xml" />
	<link>http://christodonte.com</link>
	<description>A few words about information security</description>
	<lastBuildDate>Fri, 30 Apr 2010 02:34:40 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=abc</generator>
		<item>
		<title>New malware targeting MAC OS X</title>
		<link>http://christodonte.com/2008/11/new-malware-targeting-mac-os-x/</link>
		<comments>http://christodonte.com/2008/11/new-malware-targeting-mac-os-x/#comments</comments>
		<pubDate>Wed, 19 Nov 2008 02:33:00 +0000</pubDate>
		<dc:creator>Marcos Christodonte II</dc:creator>
				<category><![CDATA[InfoSec]]></category>
		<category><![CDATA[mac os x]]></category>
		<category><![CDATA[malware]]></category>

		<guid isPermaLink="false">http://christodonte.com/?p=135</guid>
		<description><![CDATA[Trend Micro reports of a new form a malware targeting MAC OS X. The malware, called OSX_LAMZEV.A, can download itself when a user visits a compromised website, or when a user downloads it thinking it&#8217;s a legitimate program.  According to Trend: It prompts the user to select an application and port number above 1024. This may serve [...]]]></description>
			<content:encoded><![CDATA[<p><a title="MAC OS X" rel="lightbox[pics135]" href="http://christodonte.com/wp-content/uploads/2008/11/mac_os_x.jpg"></a>Trend Micro reports of a new form a malware targeting MAC OS X. The malware, called OSX_LAMZEV.A, can download itself when a user visits a compromised website, or when a user downloads it thinking it&#8217;s a legitimate program. </p>
<p>According to Trend:</p>
<blockquote><p>It prompts the user to select an application and port number above 1024. This may serve as a backdoor whenever the application is opened.</p>
<p>It creates the file <em>/tmp/com.apple.DockSettings</em> and is copied to <em>~/Library/LaunchAgents</em>. It is then deleted once it has been loaded. This routine allows the backdoor to execute during system startup</p></blockquote>
<p>The full article can be found <a title="Malware for MAC OS X" href="http://blog.trendmicro.com/new-malware-threatens-mac-users/" target="_blank">here</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://christodonte.com/2008/11/new-malware-targeting-mac-os-x/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
