About
Subscribe

Sophos discovers first virus for Mac OS X

Johannesburg, 17 Feb 2006

Experts at SophosLabs, Sophos`s global network of virus, spyware and spam analysis centres, have discovered the first virus for the Apple Mac OS X platform.

The virus, named Leap-A (also known as Oompa-A) spreads via the iChat instant messaging system, forwarding itself as a file called latestpics.tgz to contacts on the infected users` "buddy" list.

When the latestpics.tgz file is opened on a computer it disguises itself with a JPEG graphic icon in an attempt to fool people into thinking it is harmless. The worm uses the text "oompa" as an infection marker in the resource forks of infected programs to prevent it from re-infecting the same files.

"Leap-A shows that the malware threat on Mac OS X is real," says Brett Myroff, CEO of local Sophos distributor, NetXactics. "With the Mac platform becoming more popular worldwide, it`s only natural that virus writers will be targeting these users to a much larger degree. Mac OS X users should not believe it is okay to be unconcerned about viruses."

Experts at Sophos are continuing to examine Leap-A and will issue further information. Sophos customers have been automatically protected against the worm since 12:25 GMT.

"This is the first real instance where Mac users are facing the same threats as PC users, who constantly have to be vigilant of emerging hybrid threats," says Myroff. "Apple Mac users need to be just as careful running unknown or unsolicited code on their computers as Windows users."

Sophos advises all computer users, whether running PCs or Macs, to practise safe computing and keep their anti-virus software updated.

Share

NetXactics

NetXactics is a South African-based company, focused on the provision of security solutions. It is the sole distributor in Sub-Saharan Africa for UK-based Sophos Plc, one of the leaders in the provision of anti-virus and anti-spam software for the corporate environment. For more information, visit NetXactics at www.netxactics.co.za.

Editorial contacts

Adriaan du Plessis
Me Talk Pretty
(011) 447-3785
metalkpretty@telkomsa.net