By Joris Evers
Wednesday, November 29 2006 09:02 AM
URL: http://www.zdnetasia.com/news/security/0,39044215,61970864,00.htm

A new adware program silently installs on Mac OS X systems and opens Web browser windows, according to F-Secure.

The program, dubbed iAdware by the Finnish security company, is possibly the first example of adware for Macs. It is especially interesting since it doesn't require administrative privileges to nestle itself on the computers, according to F-Secure.

"We won't disclose the exact technique used here, it's a feature not a bug, but let's just say that installing a System Library shouldn't be allowed without prompting the user," according to the F-Secure blog last week.

The program is a proof-of-concept sent to F-Secure and it is not out targeting users on the Internet.

"In theory, this program could be silently installed to your user account and hooked to each application you use," according to the F-Secure blog. "This particular sample successfully launched the Mac's Web browser when we used any of a number of applications."

Malicious software that targets Mac OS X systems is rare and has been limited largely to proof-of-concept code, instead of actual attacks. However, there are indications that hackers are increasingly targeting the Mac, which experts have said is not impervious to attacks.

For example, as part of a campaign called the Month of the Kernel Bugs, several new flaws have been disclosed in Apple Computer software, the latest on Tuesday in the AppleTalk protocol. Last week, exploit code was released for another yet-to-be-fixed flaw in Mac OS X related to disk image structures.

Apple could not immediately be reached for comment.