Blog

Earlier reports from Intego Security http://www.intego.com/news/ism0705.asp are that several websites have been infected with some new malicious website links that attempt to lure users into running malicious code.

The sites are hosting code which checks to see what browser you are using. If you are using a Windows PC it will attempt to serve you a Windows binary, if you are a MAC a disk image file (.dmg).

The file attempts to change the DNS server settings for the machine and redirect all DNS queries to the attackers server in order to generate advertizing revenue.

Some screenshots are available within Sunblets Blog also here:

http://sunbeltblog.blogspot.com/2007/10/screenshot-of-new-mac-trojan.html
http://sunbeltblog.blogspot.com/2007/10/mackanapes-can-now-can-feel-pain-of.html

Threatseeker is scanning the Web looking for additional sites that we don’t already have classified and that are infected with these links.