Intego, an anti-virus maker has cautioned Mac Users to not download pirated Apple iWork ’09 installer from sites offering pirated software. According to Intego, the download contains an additional package called iWorkServices.pkg, which is actually OSX.Trojan.iServices – a Trojan horse discovered by Intego on Wednesday 21 January.
Intego explains, “When installing iWork 09, the iWorkServices package is installed. The installer for the Trojan horse is launched as soon as user begins the installation of iWork, following the installer’s request of an administrator password. The software is installed as a startup item (in /System/library/Startupitems/iWorkServices, a location reserved normally for Apple startup items), where it has read-write-execute permissions for root. The malicious software connects to a remote server over the Internet; this means that malicious user will be alerted that this Trojan horse is installed on different Macs, and will have the ability to connect to them and perform various actions remotely. The Trojan horse may also download additional components to an infected Mac.”
As always we will advice our readers to not download and install software from unknown sources. The iWork '09 is available on Amazon for just $74 with free shipping.
[Via MacWorld]