OSX/OpinionSpy: Update on the Mac Spyware Uncovered by Intego
Article by George Norman
On 03 Jun 2010
If you have been watching the OSX/OpinionSpy story closely, here’s the update: Intego uncovered that the spyware, after a while, installs another application on the user’s machine. The application, called PermissionResearch, is another variant of the same spyware. An update for the company’s Intego VirusBarrier X5 and X6 applications has been released. Users are well advised to update their threat filters to stay safe and protected.

If this is the first time you hear about OSX/OpinionSpy, here’s the story so far. A couple of days ago Intego, company that specializes in providing security solutions for Mac, found that several freely distributed software applications for Mac will download spyware during the installation process. That spyware is OSX/OpinionSpy.


Intego released the following details about it:
- A Windows version of this threat has been out there since 2008.
- The spyware runs as root with full rights to access and change any file.
- The spyware opens a HTTP backdoor using port 8254.
- It uses a lot of CPU.
- It analyzes packets entering and leaving the compromised machine.
- It injects code into Firefox, iChat and Safari. It copies personal data from these apps.
- It sends encrypted data to a number of servers in a regular basis. It uses ports 80 and 443 to do so.
- It can be automatically upgraded.
- After a period of time, some machines infected with this spyware no longer work properly.
- The spyware doesn’t go away if the application or screensaver that delivered it is deleted.

Intego has also made a list of applications that install OSX/OpinionSpy:
  • MishInc FLV To Mp3
  • Secret Land ScreenSaver v.2.8
  • Color Therapy Clock ScreenSaver v.2.8
  • 7art Foliage Clock ScreenSaver v.2.8
  • Nature Harmony Clock ScreenSaver v.2.8
  • Fiesta Clock ScreenSaver v.2.8
  • Fractal Sun Clock ScreenSaver v.2.8
  • Full Moon Clock ScreenSaver v.2.8
  • Sky Flight Clock ScreenSaver v.2.8
  • Sunny Bubbles Clock ScreenSaver v.2.9
  • Everlasting Flowering Clock ScreenSaver v.2.8
  • Magic Forest Clock ScreenSaver v.2.8
  • Freezelight Clock ScreenSaver v.2.9
  • Precious Stone Clock ScreenSaver v.2.8
  • Silver Snow Clock ScreenSaver v.2.8
  • Water Color Clock ScreenSaver v.2.8
  • Love Dance Clock ScreenSaver v.2.8
  • Galaxy Rhythm Clock ScreenSaver v.2.8
  • 7art Eternal Love Clock ScreenSaver v.2.8
  • Fire Element Clock ScreenSaver v.2.8
  • Water Element Clock ScreenSaver v.2.8
  • Emerald Clock ScreenSaver v.2.8
  • Radiating Clock ScreenSaver v.2.8
  • Rocket Clock ScreenSaver v.2.8
  • Serenity Clock ScreenSaver v.2.8
  • Gravity Free Clock ScreenSaver v.2.8
  • Crystal Clock ScreenSaver v.2.6
  • One World Clock ScreenSaver v.2.8
  • Sky Watch ScreenSaver v.2.8
  • Lighthouse Clock ScreenSaver v.2.8

Intego advises you to stay away from these applications and not install them on your machine.

Tags: Intego, Apple, Mac, Security, Spyware, OSX/OpinionSpy
About the author: George Norman
George is a news editor.
You can follow him on Google+, Facebook or Twitter

I Hope you LIKE this blog post! Thank you!
What do YOU have to say about this
blog comments powered by Disqus
Popular News
By George Norman on 17 Aug 2017
With the blockbuster movie season upon us, Sony decided to celebrate the occasion with a sale: the Attack of the Blockbusters Sale that offers discounts of up to 50% (60% if you’re a PlayStation Plus member) on a ton of PS4 video games.
By George Norman on 17 Aug 2017
Samsung’s new T5 portable solid-state drive (PSSD) uses the latest 64-layer V-NAND technology, offers between 250GB and 2TB of storage capacity, has a lightweight and shock-resistant design that’s smaller than the average business card, and delivers industry-leading transfer speeds of up to 540 MB/s.
Related News
Sponsored Links
Hot Software Updates
Top Downloads
Become A Fan!
Link To Us!
OSX/OpinionSpy: Update on the Mac Spyware Uncovered by Intego
HTML Linking Code