SecureMac says it has discovered a new trojan horse in the wild that affects Mac OS X, including Snow Leopard. The trojan horse, trojan.osx.boonana.a, is spreading through social networking sites, including Facebook, disguised as a video.
The trojan is currently appearing as a link in messages on social networking sites with the subject "Is this you in this video?" According to the folks at SecureMac, when a user clicks the infected link, the trojan initially runs as a Java applet, which downloads other files to the computer, including an installer, which launches automatically.
When run, the installer modifies system files to bypass the need for passwords, allowing outside access to all files on the system. Additionally, the trojan sets itself to run invisibly in the background at startup, and periodically checks in with command and control servers to report information on the infected system. While running, the trojan horse hijacks user accounts to spread itself...| Read more »