Malware Writer Taunts Security Software Company
There’s been a bit of talk in the press lately about how Apple is now suggesting that Mac users install and use antivirus software. A bit of news came out today that I found funny. Security software company Intego published on its blog information about a new variant of the RSPlug Trojan horse. This one differs not only in its name, and undoubtedly in some of its code, but also because it calls out Intego in the code. It has a line of code that says, “begin 666 intego”, which, according to the Intego blog post, tells a Mac to create a file named “intego” with specific permissions. (666 means read-write permissions for the user, group and others.) I find it kind of funny that the malware creators are taunting security software companies like this, but I guess everyone has to have fun in their work.
