Security researchers have discovered a new malware affecting Mac OS X machines that grants attackers full remote access to the computer, as well as stealing data and hijacking the user's webcam. While the real app is meant to convert file formats into documents that can be read and opened with Microsoft Word, the fake app instead simply quietly downloads a malicious script when executed. Eleanor within a malicious version of a popular free Mac OS X app called Easy Doc Converter.
The web-based control panel enables the attacker to do pretty much do whatever they want with your machine – they can view, edit, rename, delete, upload or download your files, execute commands, execute scripts in a variety of programming languages, connect and administer databases, execute and close programs via the Task Manager and even send emails from your email client with attached files.
And for those of you who are paranoid enough to put tape over your webcam like Mark Zuckerberg and FBI director James Comey, it would probably come in handy in this situation because Eleanor contains a tool that can capture images and videos from Mac machines with built-in webcams."This type of malware is particularly dangerous as it's hard to detect and offers the attacker full control of the compromised system," says Tiberius Axinte, Technical Leader, Bitdefender Antimalware Lab.
"For instance, someone can lock you out of your laptop, threaten to blackmail you to restore your private files or transform your laptop into a botnet to attack other devices.
The possibilities are endless."Bitdefender says that users can tell the difference between the real Easy Doc Converter app and the fake Eleanor version because the fake app is not digitally signed by Apple.
This means it will work in Power PC applications, but not native applications.
What's New in 1.1 About the Trial Version When you first install the driver, your camera will operate for 30 minutes at a time.You can reset the timer by unplugging and reconnecting the camera or by rebooting. If you have any problems, please see our FAQ pages.As a precaution, Mac users are advised to only download applications from reputable websites and to make use of antivirus software to keep their machines safe. System Requirements Mac OS X 10.2.8 - 10.4.x A supported camera USB or Fire Wire port for supported camera OS X Native Video Application Note for Intel Mac owners: The Fire Wire version of this driver does not work on Intel Macs. Find out about new releases by joining our mailing lists.(You can use Apple's driver.) The USB version works under Rosetta on Tiger.