New OS X Worm On the Loose

[bazooka]

Mac users tend to think their computers are invincible.:P

[quote]
Mac OS X virus threat
www.p2pnet.net
p2pnet.net News:- Mac OS X users who may think they're safe from e-bugs had better think again.

A new Mac OS X worm which tries to disable firewall and other security software is on the loose.

The SH/Renepo worm (also known as Opener) can turn off the Mac OS X firewall and other security software; will download and install hacker tools for password-sniffing and cracking; will make key system directories world-writeable; and will create an admin-level user for later system abuse," warns UK security firm Sophos.

"Renepo also turns off accounting and logging to help hide its presence."

Because the worm tries to harvest user, configuration and password data for a wide range of applications, it represents a huge security headache for all administrators, creating a backdoor to leave infected computers vulnerable to further attack, says Sophos senior technology consultant Graham Cluley.

Renepo virus hasn't so far been seen in the wild.

"This is a shot across the bows rather than a pressing immediate danger to Mac environments," says Cluley.

===================

See:-

Opener - Renepo worm targets Mac OS X users, Sophos reports, October 25, 2004 http://www.sophos.com/virusinfo/articles/renepo.html
http://www.sophos.com/virusinfo/analyses/shrenepoa.html
(Monday 25th October 2004)

[yoda313]

Hello,

:P :P :P :P

Kevin

----What is it with the mac anyway??? It doesn't have any killer apps to run.... Can it even do doom3 yet??? I doubt it... ----

[pacmania_2001]

Virus writers don't bother writing worms/viruses for macs because they crash by themselves well enough not to warrant writing one.

[bazooka]

I even found the story on Cnet.
www.news.com.com

[ViRaL1]

I thought OS X WAS a virus.

[Faustus]

Its more a malicious program then a virus personally. I mean if I send you something called "runmehahahaha.exe" and you run it whos fault is it?

Doom3 is expected before the end of the year.

[Garibaldi]

I guess I'm safe because my OS X only runs through the pear pc emulator, and I can't get the internet to work on it yet (fun with the TAP Win32 adapter).

[SLICK RICK]

Virus writers don't bother writing worms/viruses for macs because they crash by themselves well enough not to warrant writing one.

I thought OS X WAS a virus.

So very true.

[pacmania_2001]

After using a mac to do 3D animation and rendering I've found a wonderful function that they've inbuilt into it.

You don't need to ever close a program, they'll close themselves when they crash. If only they could crash when you weren't in the middle of an important project it'd be a great feature.

[tgpo]

I've read all about this thing. I even read that topic where they wrote it. The only way it can get on someone's computer is if you make them install it under admin account. It can not install itself, if needs an admin. Not quite like the PC worms, is it?

[SLICK RICK]

I've read all about this thing. I even read that topic where they wrote it. The only way it can get on someone's computer is if you make them install it under admin account. It can not install itself, if needs an admin. Not quite like the PC worms, is it?

What are you doing here. Don't you have something you should be working on. :P

[tgpo]

I've read all about this thing. I even read that topic where they wrote it. The only way it can get on someone's computer is if you make them install it under admin account. It can not install itself, if needs an admin. Not quite like the PC worms, is it?

What are you doing here. Don't you have something you should be working on. :P

Yes, but I don't have it here at work. :P

[Capmaster]

I've read all about this thing. I even read that topic where they wrote it. The only way it can get on someone's computer is if you make them install it under admin account. It can not install itself, if needs an admin. Not quite like the PC worms, is it?

What are you doing here. Don't you have something you should be working on. :P

Yes, but I don't have it here at work. :P

<kicks dirt and mumbles "I can respect that">

[SLICK RICK]

I've read all about this thing. I even read that topic where they wrote it. The only way it can get on someone's computer is if you make them install it under admin account. It can not install itself, if needs an admin. Not quite like the PC worms, is it?

What are you doing here. Don't you have something you should be working on. :P

Yes, but I don't have it here at work. :P

<kicks dirt and mumbles "I can respect that">

Not me, "Punch out and get your ass home."

[CoasterCreator]

must of been a M$ virus