I guess too many people got wind of the iWork 09 Trial Trojan application that was circulating
in some peer-to-peer networks. The bad guys have changed their strategy: they're now targeting people downloading pirated versions of Adobe Photoshop.According to this post on Gizmodo
, the Trojan infecting users of stolen copies of Photoshop CS4 is the same Trojan that was targeting Mac users just a few days ago. This Trojan, dubbed OSX.Trojan.iServices.B, installs itself with root privileges -- presumably after a user provides their username and password to authenticate to the system. Those credentials are then passed along to a number of IP addresses. Nice.
I wonder what the creator of this Trojan will use those credentials for?
This attack reminds me of the scareware we covered a few months ago, only those attacks were targeting Windows XP users.