<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Crimeware comes to OS X</title>
	<atom:link href="http://blogs.mcafee.com/mcafee-labs/2007/10/31/crimeware-comes-to-os-x/feed" rel="self" type="application/rss+xml" />
	<link>http://blogs.mcafee.com/mcafee-labs/crimeware-comes-to-os-x</link>
	<description></description>
	<lastBuildDate>Tue, 29 Nov 2011 07:51:20 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Scented rocks</title>
		<link>http://blogs.mcafee.com/mcafee-labs/crimeware-comes-to-os-x/comment-page-1#comment-12879</link>
		<dc:creator>Scented rocks</dc:creator>
		<pubDate>Fri, 03 Sep 2010 23:14:19 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com/2007/10/31/crimeware-comes-to-os-x/#comment-12879</guid>
		<description>Looks like Puper has continue to dominate the net, its a sad situation everybody has to fear downloading, or visiting certain sites in fear of trojans, puper, and all the other viruses.  Great article Allysa</description>
		<content:encoded><![CDATA[<p>Looks like Puper has continue to dominate the net, its a sad situation everybody has to fear downloading, or visiting certain sites in fear of trojans, puper, and all the other viruses.  Great article Allysa</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ryan</title>
		<link>http://blogs.mcafee.com/mcafee-labs/crimeware-comes-to-os-x/comment-page-1#comment-12874</link>
		<dc:creator>Ryan</dc:creator>
		<pubDate>Wed, 18 Jun 2008 03:00:08 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com/2007/10/31/crimeware-comes-to-os-x/#comment-12874</guid>
		<description>any ideas on how to remove such malware?</description>
		<content:encoded><![CDATA[<p>any ideas on how to remove such malware?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Myusenet</title>
		<link>http://blogs.mcafee.com/mcafee-labs/crimeware-comes-to-os-x/comment-page-1#comment-12872</link>
		<dc:creator>Myusenet</dc:creator>
		<pubDate>Thu, 31 Jan 2008 23:58:03 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com/2007/10/31/crimeware-comes-to-os-x/#comment-12872</guid>
		<description>Usenet - a set of machines which exchange clauses marked with one or is more universal-recognized labels, the named teleconferences (or &quot;groups&quot; for short). If the above definition Usenet seems uncertain, therefore it. It is almost impossible to draw a conclusion on all sites Usenet in any not trivial way. Usenet covers the governmental agencies, greater universities, high schools, firms of all sizes, house computers of all descriptions, etc.</description>
		<content:encoded><![CDATA[<p>Usenet &#8211; a set of machines which exchange clauses marked with one or is more universal-recognized labels, the named teleconferences (or &#8220;groups&#8221; for short). If the above definition Usenet seems uncertain, therefore it. It is almost impossible to draw a conclusion on all sites Usenet in any not trivial way. Usenet covers the governmental agencies, greater universities, high schools, firms of all sizes, house computers of all descriptions, etc.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Frowbart</title>
		<link>http://blogs.mcafee.com/mcafee-labs/crimeware-comes-to-os-x/comment-page-1#comment-12871</link>
		<dc:creator>Frowbart</dc:creator>
		<pubDate>Wed, 07 Nov 2007 14:55:00 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com/2007/10/31/crimeware-comes-to-os-x/#comment-12871</guid>
		<description>[quote]Dozens of fake codec sites are serving the malicious disk image file to Mac web browsers [/quote]

Do you really need a link?</description>
		<content:encoded><![CDATA[<p>[quote]Dozens of fake codec sites are serving the malicious disk image file to Mac web browsers [/quote]</p>
<p>Do you really need a link?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: John G.</title>
		<link>http://blogs.mcafee.com/mcafee-labs/crimeware-comes-to-os-x/comment-page-1#comment-12870</link>
		<dc:creator>John G.</dc:creator>
		<pubDate>Fri, 02 Nov 2007 06:53:29 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com/2007/10/31/crimeware-comes-to-os-x/#comment-12870</guid>
		<description>Please can someone give a (non-clickable is you must) URL for a website that actually does this?

We&#039;ve seen the theories, now where are the actual sites that install this on a Mac?</description>
		<content:encoded><![CDATA[<p>Please can someone give a (non-clickable is you must) URL for a website that actually does this?</p>
<p>We&#8217;ve seen the theories, now where are the actual sites that install this on a Mac?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: CopiaTECH SMB Security</title>
		<link>http://blogs.mcafee.com/mcafee-labs/crimeware-comes-to-os-x/comment-page-1#comment-12869</link>
		<dc:creator>CopiaTECH SMB Security</dc:creator>
		<pubDate>Thu, 01 Nov 2007 21:37:42 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com/2007/10/31/crimeware-comes-to-os-x/#comment-12869</guid>
		<description>Great post Allysa. It may sound simplistic, but I think Apple has become too big to ignore by the &quot;criminal&quot; element with successes of the iPhone &amp; iPod. It is easy to be Anti-Microsoft, but for criminals it is all about numbers and Apple is starting to get them with these products.

Michael Rowles
CopiaTECH SMB Security</description>
		<content:encoded><![CDATA[<p>Great post Allysa. It may sound simplistic, but I think Apple has become too big to ignore by the &#8220;criminal&#8221; element with successes of the iPhone &amp; iPod. It is easy to be Anti-Microsoft, but for criminals it is all about numbers and Apple is starting to get them with these products.</p>
<p>Michael Rowles<br />
CopiaTECH SMB Security</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Juan de Dios Santander Vela</title>
		<link>http://blogs.mcafee.com/mcafee-labs/crimeware-comes-to-os-x/comment-page-1#comment-12867</link>
		<dc:creator>Juan de Dios Santander Vela</dc:creator>
		<pubDate>Thu, 01 Nov 2007 15:58:33 +0000</pubDate>
		<guid isPermaLink="false">http://blogs.mcafee.com/2007/10/31/crimeware-comes-to-os-x/#comment-12867</guid>
		<description>A few educated guesses:
- As you are using an installer, you have to authenticate, and the installer script will be able to do as it pleases because it is now authenticated. Still, the installer .bom file should point to all installed files for removal.
- This is not exactly a fault of Mac OS X, it is caused by shrewd social engineering: &quot;the user is programmed&quot; to dismiss all of the OS warnings because the user is motivated to complete the install.
- The use of fake DNS lookup makes it very difficult for web-service based phising detection techniques to find out, other than pointing out that the phising detection mechanism cannot work with a working internet connection.</description>
		<content:encoded><![CDATA[<p>A few educated guesses:<br />
- As you are using an installer, you have to authenticate, and the installer script will be able to do as it pleases because it is now authenticated. Still, the installer .bom file should point to all installed files for removal.<br />
- This is not exactly a fault of Mac OS X, it is caused by shrewd social engineering: &#8220;the user is programmed&#8221; to dismiss all of the OS warnings because the user is motivated to complete the install.<br />
- The use of fake DNS lookup makes it very difficult for web-service based phising detection techniques to find out, other than pointing out that the phising detection mechanism cannot work with a working internet connection.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

