2 new malware news stories for the Mac this week.

Just listening to MacBreak Weekly, there is now a Virus Toolkit (called Crimekit) for sale, which can be used to create viruses for OS X. It is also called the Wayland-Yutani Bot, and creates a botnet of infected Macs.

There is also a malware app out there that disguises itself as anti-virus software. It pops up when you visit an infected website with a pop-up which says that your Mac is infected with a virus and you should download an anti-virus package, the linked package actually installs the malware and you can only free your machine, when you hand over your credit card details. The software calls itself MAC Defender, which is not to be confused with Mac Defender, which is legitimate software from a German company.

The people behind it have used Search Engine Poisoning to get infected pages higher ranks for many common search terms.

Crimkit is yours for a measley $1000.,

[utl=http://www.theregister.co.uk/2011/05/03/mac_osx_crimeware_kit/]Register Clicky on Crimkit[/url]

Link to MAC Defender

Virus Barrier X6 for OS X has already been updated to recognise this malware and its web blocker also stops infected pages being loaded.

Are you sure about the details of this? The description I read suggested it can be used to create malware for OS X but there is no evidence it can be used to create viruses (i.e. programs that are capable of self-replicating). AFAIR, this system still requires the user to run an application on their computer for it to 'infect' it.
However, I do kind of like the Aliens reference...


So far on the Mac, user scepticism is the best anti-virus system you can have. 'Don't run stuff if you don't trust where it's come from'. I'm rather sceptical at least about press releases from AV manufacturers of the form 'this nasty is terrible and is out to get you, but you'll be safe if you buy our latest product.'

Jon

Yet more Mac virus FUD from a company that makes Mac security software.

AFAIK that AV product is cross-platform

Do you expect them to be quiet about this, to avoid the accusation of spreading FUD?

No, but there are ways of saying things that make it sound more like a piece of information and less like a sales pitch. Plus I don't know if the subject line was Dave's idea or not, but I don't actually consider 'two' to be 'a bonanza', personally.


Jon

Has worked for me. And our office Windows system had never seen AV software, but is clean (40 users on 2 terminal servers) - I finally talked them into sticking AV software on it as a precaution.

And I've never seen a virus on any of the machines I've had. I've had a couple of customers who were infected, but it was always and incredibly small percentage.

Shock! Horror! Commercial company would also like to sell its products as well
I can just see Jobs at a keynote
"just one more thing... Its a new iPhone, its got a new body, a faster processor and more memory/storage. Thats it"
..walks off stage.

True, to a degree but there's a fundamental difference between someone saying 'buy our product and your life will get much better' and 'buy our product or your life will get much worse'.

Jon

Amusing.