Mac users, beware. Your OSX machines may no longer be as secure as you think.
Denmark-based computer security firm CSIS reported that the first advanced do-it-yourself (DIY) crimeware kit has been announced on some closed underground forums.
"CSIS finds this crimekit to be quite disturbing news since MacOS previously to some degree has been spared from the increasing amount of malware which has haunted Windows-based systems for years. This could have resulted in a false sense of security that might make Mac OS user especially vulnerable to a sudden and highly sophisticated attack," CSIS security specialist Peter Kruse said in a blog post.
"Detailed information about this crimeware kit is not being leaked publicly and the authors of the kit are obviously trying to stay below the radar allowing only vetted users of the forums to see most of the content," he added.
He said that, just like DIY crimeware kits for PCs, this tool includes a builder, an admin panel, and encryption support.
It is being sold under the name Weyland-Yutani BOT and it is the first of its kind to hit the Mac OS platform, he said.
"Apparently, a dedicated iPad and Linux release are under preparation as well," he added.
The Weyland-Yutani BOT supports web injects and form grabbing in Firefox; with both Chrome and Safari soon to follow.
CSIS eCrime Unit claimed to have videos documenting both the admin panel and its functionality as well as the builder itself.
Kruse also said the video demonstrating how the kit works and how it can collect passwords through formgrabbing has been made available on Youtube.
"Both video clips prove this kit to be fully operational already. This v1.0 of the BOT has a license price for the complete kit equal to 1,000 WMZ/LR," he said.
