Security warning against rogue Mac app

By Dawn Kawamoto, CNET News.com
Wednesday, January 16, 2008 10:35 AM

F-Secure is warning Mac users to beware of a rogue software application that is making the rounds.

The application, MacSweeper, purports to clean a user's Mac, but in reality will "always" claim to find something wrong with a user's system and seek payment to remove the unwanted file or spyware, security researcher F-Secure noted in a blog posting Tuesday.

"It's a scam...when you visit the MacSweeper Web site with a PC and click on "Scan", it will tell you that you have security vulnerabilities in folders that only exist on a Mac like system_root/home. Fake? Oh yeah," according to F-Secure.

F-Secure also points to MacSweeper's company description, which is an exact copy of the description posted on the Web site for security titan Symantec.

Users who stumble across the MacSweeper site and download and run its security scan will always find something that it claims needs to be removed, Patrik Runald, an F-Secure security response manager, said in an e-mail interview.

When users click on the "remove" button, MacSweeper will ask them to buy the product, a "lifetime" subscription for US$39.99.

"Considering the nature of the product, I wouldn't recommend anyone to give away their credit card details... While you might get a keycode, there's no telling what they will use your credit card details for in the future," Runald notes.

MacSweeper marks the first time a rouge cleaning tool has been developed and targeted to Mac users, indicating the platform is gaining enough users that it is catching the attention of malicious code writers, according to F-Secure.

Others have raised questions about MacSweeper, as well, according to a forum post on Mac OSX Hints.


WORTHWHILE?

0

0 votes
Blog

Talkback 0 comments

There are currently no comments for this post.


Tech Jobs Now!

Search for your ideal tech job:

Create your own yum repository

Open Source

Learn how to create your own yum repository with the createrepo tool. One thing it allows you to do is distribute specialized packages within an organization.


Read more »



  • Enterprise 2.0

    Vince Casarez, vice president of product management at Oracle, explains how Web 2.0 technologies, such as tags, wikis, and mash-ups, can be applied within an organization.
    Play video


  • Nehalem Architecture

    What makes next-generation Intel® Microarchitecture (Nehalem) such a superior successor?
    Play video

 
Free the untapped potential of your IT infrastructure
Reduce bottlenecks to drive the efficiency and productivity of Business IT.
» Ultimate virtualization blade
» Scalable SAN solution
» Accelerate service delivery
On demand CRM goes strategic
CRM technology has come of age, and is now able to align with your customer strategy and grow in step with your business.

» Learn more about Oracle’s CRM Solutions




Could this be the most critical budget for India?

Blog thumbnail

For business journalists in India, budget time is excitement time. It's like sports journos covering the Olympics. As a newspaper correspondent, I too had my fill of budget-time excitement. But..... by Swati Prasad

Read more »

Tags

  1. attack
  2. bank
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. u.s.
  19. viruses and worms
  20. web