from; eSecurity Planet; MP3 Trojan Affects Only Mac Platform Some security vendors Monday issued a low-level alert for MAC_MP3CONCEPT.A, a proof-of-concept Trojan that only affects the Macintosh platform. http://www.esecurityplanet.com/alerts/article.php/3339001 MP3 Trojan Affects Only Mac Platform April 12, 2004 Some security vendors Monday issued a low-level alert for MAC_MP3CONCEPT.A, a proof-of-concept Trojan that only affects the Macintosh platform. According to Trend Micro, it does not have any destructive payload or viral routine to infect or damage the target system. It also has no spreading capability. The Trojan's only exploit is in its icon, which appears to be a valid MP3 file but is actually a Macintosh executable with an MP3 file inside. Upon execution, it plays an MP3 file depicting the sound of a laughing man. Simultaneously, it also displays a message box with any of the following text: =13Yep, this is an application (So what is your iTunes playing right now?)=14 =13(But you can add it to your iTunes library too.)=14 Technical details are at this Trend Micro page. http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=3DMAC_MP3CONC EPT.A&VSect=3DT According to F-Secure, a new Trojan known as MP3Concept was found recently. This is not a virus, and it has not been seen in the wild. It is not spreading and infecting Macintoshes. The vendor says it is a proof-of-concept example...but an interesting one; partly because it's on a Mac, partly because it's an MP3 file. Macintosh used to have lots of viruses, F-Secure officials report. In fact, during late 1980s viruses we're considered to be largly a Macintosh problem, not a PC problem. Nowadays of course situation is exactly the opposite, with less than 100 known Macintosh-only viruses and around 90,000 PC viruses (and a couple of hundred macro viruses which work under Microsoft Office in both Mac and Windows). In fact, with the release of the new Mac OS X, several expert-techie type of users have migrated to the new Macintosh laptops. Partly because the machines are really nice and look cool, partly because they come with 16:9 wide screens, partly because they are faster than the PC counterparts and partly because the operating system nowadays actually runs on top of Unix. More information is at this F-Secure page. http://www.f-secure.com/weblog/#00000129 _______________________________________________ Mike ~ It is a good day if I learned something new. Editor MikesWhatsNews see a sample on my web page http://www3.telus.net/mikebike <mikeswhatsnews-request@xxxxxxxxxxxxx?Subject=3Dsubscribe> http://www3.telus.net/mikebike/worm_removal.htm See my Anti-Virus pages http://virusinfo.hackfix.org/index <virusinfo-request@xxxxxxxxxxxxx?Subject=3Dsubscribe> A Technical Support Alliance and OWTA Charter Member