Certified MAC malware

[silicon_toad2000]

http://thehackernews.com/2013/05/apple-certified-mac-malware-captures.html

Earlier this week, new Mac spyware was discovered on a computer at the Oslo Freedom Forum, which is an annual human rights conference. Dubbed as *OSXKitM.A*, discovered by computer security researcher *Jacob Appelbaum*.
This Mac malware that has been used to spy on activists, targeted via spear phishing attack and had received emails that duped them into installing the malware.

The malware is a backdoor application called "*macs.app*" which launches automatically upon login. There are two command-and-control servers, located at securitytable.org and docsforum.info.

Interestingly, the malware is signed with an *Apple Developer ID*, which is designed to prevent the installation of malware, associated with the name Rajender Kumar and the use of the ID appears to be an
attempt to bypass Apple's Gatekeeper execution prevention technology.

As of right now, F-Secure is looking into the origination of the malware and though it doesn’t appear to be widespread. You can easily uninstall the malware by deleting the *macs.app* entry from your machine’s login items and uninstalling the app which could be located in a number of places including your Mac’s home, applications or downloads folders.

[White Stripes]

<sarcasm>but macs dont get viruses</sarcasm>

[silicon_toad2000]

Is it irony that their business model to make money is to control every aspect of the apple experience, but in order to make as much money as they can through the app store they need a system in place to allow a certain volume of apps to be certified, but that volume creates issues and they apparently don't have the level of control they thought they had.