为Mac系统提供安全和隐私软件的厂商Intego本周二警示说，一些Mac软件含有间谍软件。Macworld已经取得了存在该间谍软件的初步软件列 表。该间谍软件被称为OSX/OpinionSpy，它是2008年出现的Windows 间谍软件的变种。OSX/OpinionSpy弹出一个对话框，以市场调查的名义欺骗用户，取得 admin密码，安装“PremierOpinion”进程以root身份运行，在8254端口打开http后门，扫描所有本地和网络驱动卷，向 Safari，Firefox以及iChat中注入恶意代码，窃取包含电子邮件地址等信息的加密数据以及用户名，密码，信用卡号码等个人数据。
OSX/OpinionSpy可以自动升级并通过Mac OS自启动，即使卸载宿主程序，它依然在Mac中存在。
到目前为止，Intego发现在“MishInc FLV To Mp3”和一些由7art-screensavers制作的屏保程序含有该间谍软件：
* Secret Land ScreenSaver v.2.8
* Color Therapy Clock ScreenSaver v.2.8
* 7art Foliage Clock ScreenSaver v.2.8
* Nature Harmony Clock ScreenSaver v.2.8
* Fiesta Clock ScreenSaver v.2.8
* Fractal Sun Clock ScreenSaver v.2.8
* Full Moon Clock ScreenSaver v.2.8
* Sky Flight Clock ScreenSaverv.2.8
* Sunny Bubbles Clock ScreenSaver v.2.9
* Everlasting Flowering Clock ScreenSaver v.2.8
* Magic Forest Clock ScreenSaver v.2.8
* Freezelight Clock ScreenSaver v.2.9
* Precious Stone Clock ScreenSaver v.2.8
* Silver Snow Clock ScreenSaver v.2.8
* Water Color Clock ScreenSaver v.2.8
* Love Dance Clock ScreenSaver v.2.8
* Galaxy Rhythm Clock ScreenSaver v.2.8
* 7art Eternal Love Clock ScreenSaver v.2.8
* Fire Element Clock ScreenSaver v.2.8
* Water Element Clock ScreenSaver v.2.8
* Emerald Clock ScreenSaver v.2.8
* Radiating Clock ScreenSaver v.2.8
* Rocket Clock ScreenSaver v.2.8
* Serenity Clock ScreenSaver v.2.8
* Gravity Free Clock ScreenSaver v.2.8
* Crystal Clock ScreenSaver v.2.6
* One World Clock ScreenSaver v.2.8
* Sky Watch ScreenSaver v.2.8
* Lighthouse Clock ScreenSaver v.2.8
Intego宣称，将安全软件VirusBarrier X5和X6的威胁库升级到2010年5月31日，即可清除该间谍软件。 |
