Java-based malware turns Mac, Linux machines into zombies

Users of computers running Apple's Mac OS X and Linux were advised over the weekend to watch out against a new Java-based malwaret that can turn their machines into zombies.

 

Kaspersky Labs said the Java app is a multi-platform bot that can also run on machines running Microsoft's Windows operating system.

 

"The bot is controlled via the IRC protocol. . .After launching, the malware initiates connection to an IRC server. After successfully establishing a connection, the bot joins a predefined channel and waits for the attackers’ commands," Kaspersky researcher Anton Ivanov said in a blog post. 

 

He said the malware, dubbed HEUR:Backdoor.Java.Agent.a, encrypts itself to make detection difficult.

 

When launched, the bot copies itself into the user’s home directory and will run at system startup.

A separate report on PC World said the malware could be used for distributed denial-of-service (DDoS) attacks.

 

PC World also noted cross-platform malware are not new, as DDoS malware targeting Windows and Linux was reported by Poland’s national CERT last December.

 

“The choice of Java in this case does make the malware piece more modern. Java is multiplatform and therefore will allow the malware to run on more platforms. It may also use the fact that hackers are very focused on Java now for vulnerability research, so there is a likelihood that the malware can evolve with new ways to exploit and onboard a system,” it quoted Barry Shteiman, director of security strategy at security firm Imperva, as saying. — KDM, GMA News