For the second time in just over a week, a second virus has been found on the Mac. Trojan.osx.boonana.b is a variant of the malware that was discovered last week called Boonana. SecureMac, which discovered this new variant, believes the malware to be a variant of the Koobface virus that was discovered infecting Windows machines back in 2008.
The SecureMac bulletin noted, “The new variant, trojan.osx.boonana.b, behaves in a very similar manner to the original malware, and is currently being distributed on multiple sites. In addition to the website documented by ESET as currently distributing the malware, SecureMac has identified two more websites that are currently hosting the new malware variant. Rather than the initial site which tricks users into running (and installing) the malware, these servers seem to be hosting update code for the malware. The infected machines contact these servers looking for updates to the malware payload. At the time of analysis (November 2nd, 2010), these servers were live, and distributing malware.”
In addition to SecureMac, Microsoft has also identified this virus as a critical threat for both Macs and PCs in their Malware Protection Center.
As previously reported here on Mac|Life, the virus is a Java-based application that runs in the web browser and gets around administrator password entry before begin run. This means that the virus has the ability to install itself without your knowledge.
You can protect yourself by disabiling Java in your Mac web browser of choice; and, if you believe your Mac is infected, you can download and run a free removal tool from the SecureMac website.
As always, stay tuned to Mac|Life for more information on the Boonana virus.
Follow this article’s author, Cory Bohon on Twitter.