News for hackers. Stuff that matters.

A comment on New Mac OS X botnet discovered.

Re:New Mac OS X botnet discovered by spectres_ on Friday October 03, 2014 @04:21PM (#8407439)
To see if you haven't got it:

In terminal run:

defaults read /Applications/Safari.app/Contents/Info LSEnvironment

You should get this error:

The domain/default pair of (/Applications/Safari.app/Contents/Info, LSEnvironment) does not exist

Then run:

defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES

You should get this error:

The domain/default pair of (/Users/YOURUSER/.MacOSX/environment, DYLD_INSERT_LIBRARIES) does not exist

If you do you are clean of this variant!

If this doesn't happen go to http://www.f-secure.com/v-descs/trojan-downloader_osx_flashb... to fix it

[ Parent | on HN ]
Re:New Mac OS X botnet discovered by cpncrunch on Friday October 03, 2014 @07:13PM (#8408139)
That is for the Flashback trojan, but this is a new trojan, according to the post.
[ Parent | on HN ]