Flashback Trojan Most Present on Snow Leopard Machines
The Russian security firm that originally acknowledged the Flashback botnet spread across 650,000 Macs continues to analyze the behavior of the Trojan, as “Files downloaded by the Trojan horse from servers controlled by criminals have become one of the main subjects for analysis.”
“Doctor Web virus analysts continue to study the first-ever large-scale botnet created by means of BackDoor.Flashback and comprised of computers running Mac OS X,” says the firm.
The malicious code resulted from the download searches for two types of control servers. One type of servers intercepts web search traffic and redirects the user to malicious sites controlled by cyber-criminals. The other sends out commands to bots instructing them to perform backdoor tasks in the system that’s just been infected.