Page 1 of 2 12 LastLast
Results 1 to 10 of 13
Discuss iServices.a Analysis at the OSX Security - Hackint0sh.org; For everyone who wants to take a look at the trojan and analyse the code ...
  1. #1
    sam
    sam is offline
    Chief of Administration
    iPhone Dev Team
    Array sam's Avatar

    Join Date
    Jun 2007
    Posts
    1,852
    Post Thanks / Like
    Downloads
    35
    Uploads
    277
    Rep Power
    10

    Default iServices.a Analysis

    For everyone who wants to take a look at the trojan and analyse the code himself, here is a copy of a not dangerous x86 disassembly:

    RapidShare: Easy Filehosting
    If you just want to support hackint0sh.org with a donation click here.
    Follow me on twitter: http://twitter.com/sam_hackint0sh



  2. #2
    Senior Professional Array JayBird's Avatar

    Join Date
    Oct 2008
    Posts
    373
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    27

    Default

    was this in a iWork 9 distro???
    I Do Not Condone Piracy, If You Like It BUY IT! - It's Ok To Test But Not Steal - MacBook Pro Owner

    iPhone Owner 3G

  3. #3
    sam
    sam is offline
    Chief of Administration
    iPhone Dev Team
    Array sam's Avatar

    Join Date
    Jun 2007
    Posts
    1,852
    Post Thanks / Like
    Downloads
    35
    Uploads
    277
    Rep Power
    10

    Default

    Yes, exactly this one.
    If you just want to support hackint0sh.org with a donation click here.
    Follow me on twitter: http://twitter.com/sam_hackint0sh

  4. #4
    Senior Professional Array JayBird's Avatar

    Join Date
    Oct 2008
    Posts
    373
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    27

    Default

    sorry Sam, really really really stupid question
    I Do Not Condone Piracy, If You Like It BUY IT! - It's Ok To Test But Not Steal - MacBook Pro Owner

    iPhone Owner 3G

  5. #5
    Senior Professional Array JayBird's Avatar

    Join Date
    Oct 2008
    Posts
    373
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    27

    Default

    Just Wait, before you know it, to keep in pattern with these iSerives Trojans, there will be a iService.C deployed in iLife09
    I Do Not Condone Piracy, If You Like It BUY IT! - It's Ok To Test But Not Steal - MacBook Pro Owner

    iPhone Owner 3G


  6. #6
    Newbie Array

    Join Date
    Jan 2009
    Location
    Canada
    Posts
    1
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    0

    Default Little Snitch

    So I am assuming if you have Little Snitch installed you can catch this?

  7. #7
    Senior Professional Array JayBird's Avatar

    Join Date
    Oct 2008
    Posts
    373
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    27

    Default

    i would think so, but if a trojan has root access its hard to think what it cannot do....
    I Do Not Condone Piracy, If You Like It BUY IT! - It's Ok To Test But Not Steal - MacBook Pro Owner

    iPhone Owner 3G

  8. #8
    Administrator Array

    Join Date
    Oct 2007
    Posts
    4,145
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    10

    Default

    Man ... this kind of stuff is getting out of control ....
    iLife family pack is $100 ...
    Get 4 more friends to join, your cost is $20 to avoid the headache.
    The time & money you save can be used for better things ... such as donation to the forum :-))
    ** If you just want to support hackint0sh.org with a donation click here **

  9. #9
    sam
    sam is offline
    Chief of Administration
    iPhone Dev Team
    Array sam's Avatar

    Join Date
    Jun 2007
    Posts
    1,852
    Post Thanks / Like
    Downloads
    35
    Uploads
    277
    Rep Power
    10

    Default

    Well LittleSnitch can cacth A and B but they are getting more and more better meade with each generation and they open a backdoor to your system. So if you are infected you are vulernable, even if you catch the trojan's ping to the author.

    As I said in my blog post, the troojan seems to have so far unknown embedded p2p capacities. What it exactly does, no idea yet but I assume mashing up to a botnet or similar. Turning you mac in a wide open brain fried zombie with root access.
    If you just want to support hackint0sh.org with a donation click here.
    Follow me on twitter: http://twitter.com/sam_hackint0sh

  10. #10
    Senior Professional Array JayBird's Avatar

    Join Date
    Oct 2008
    Posts
    373
    Post Thanks / Like
    Downloads
    0
    Uploads
    0
    Rep Power
    27

    Default

    scary thoughts, i agree with dtube tho, $100 its not that much money, especially if 5 people joined up to pay for it.
    I Do Not Condone Piracy, If You Like It BUY IT! - It's Ok To Test But Not Steal - MacBook Pro Owner

    iPhone Owner 3G


 

 
Page 1 of 2 12 LastLast

Similar Threads

  1. My Analysis of Dev Team Blog as of 4:20pm
    By jon_slider in forum Ultrasn0w (3G(S)/iPhone 4 unlock)
    Replies: 20
    Last Post: 06-23-2009, 11:37 PM
  2. enable logging for app crash analysis?
    By stimpy in forum General
    Replies: 0
    Last Post: 12-16-2008, 04:44 PM
  3. Leak analysis
    By js- in forum iPhone Developer Exchange
    Replies: 1
    Last Post: 05-03-2008, 02:24 PM
  4. No Wi-Fi, analysis and solution?
    By Abath in forum iPhone "2G" (Rev. 1)
    Replies: 1
    Last Post: 11-22-2007, 12:35 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Powered by vBulletin®
Copyright © 2014 vBulletin Solutions, Inc. All rights reserved.
Search Engine Friendly URLs by vBSEO
(c) 2006-2012 Hackint0sh.org
All times are GMT +2. The time now is 03:33 PM.
twitter, follow us!