600,000 Macs infected with Flashback botnet

Published on April 6th, 2012 | by sylv3rblade

A trojan has been circulating the internet and infecting unsuspecting OSX users. Flashback Trojan is malware package designed to steal personal information, according to Russian antivirus company Dr. Web.

The malware was initially in September 2011 masquerading as a fake Adobe Flash Player plug-in installer. This new variant exploits Java vulnerabilities to target Mac systems.

Apple has released a patch to address the issue which you can download below:

If you want to check if your Mac has been infected with the trojan, follow the instructions below:

In terminal run:

defaults read /Applications/Safari.app/Contents/Info LSEnvironment

You should get this error:

The domain/default pair of (/Applications/Safari.app/Contents/Info, LSEnvironment) does not exist

Then run:

defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES

You should get this error:

The domain/default pair of (/Users/YOURUSER/.MacOSX/environment, DYLD_INSERT_LIBRARIES) does not exist

If you do you are clean of this variant!