The result of the check for root access determines how much Ventir can run and the path where the Trojan’s files will be installed on the victims Mac. The Ventir Tojan is delivered through a dropper that, when launched, checks whether it has root access to the machine-this is critical because that affects where the malware can install itself. It’s also worth noting that some of the keylogger components (ist and updated.kext) are previously detected by Intego VirusBarrier as OSX/logKext.E and OSX/logKext.D. LogKext has three files that function to intercept keystrokes ( updated.kext), match the codes of the keys pressed by the victim to the characters associated with these codes ( ist), and log the keystrokes along with some system events ( EventMonitor agent).įortunately, LogKext hooks on to the OS X kernel only if the dropper is successful in obtaining elevated privilges to the victims Mac. Given the recent scares about hacked accounts, the thought of software that watches what you type and sends it to the bad guys is particularly unnerving. The keystroke logger makes use of an open source software package freely available from GitHub, called LogKext. The primary feature of Ventir is that it integrates a legitimate component for intercepting keystrokes that is freely available on code sharing websites. Ventir is a Trojan horse, so it’s likely being picked up when downloading pirated software from peer-to-peer websites, such as BitTorrent. We currently do not know how the malware is distributed.
These can be used for spying and stealing information from the victim’s Mac. Trojan horse) that can leave a backdoor, a keylogger and other malicious files behind on an infected Mac.
#Keystroke software for mac for mac os#
Virus hunters have unveiled yet another modular malware for Mac OS X, called the Ventir Trojan.
#Keystroke software for mac mac os x#
Intego has seen an eyebrow-raising upward trend in the number of malicious files discovered targeting Mac OS X in the past few years, and it has many security experts concerned. Malware + Recommended + Security News Ventir Trojan Intercepts Keystrokes from Mac OS X Computers
0 kommentar(er)
