F-Secure
Tools
Trojan:OSX/Loosemaque.A
| Name : | Trojan:OSX/Loosemaque.A |
| Category: | Malware |
| Type: | Trojan |
| Platform: | OSX |
Summary
Also known as a trojan horse program, this is a deceptive program that performs additional actions without the user's knowledge or permission. It does not replicate.
Disinfection
Delete files and folder created by the trojan's installation.
Additional Details
Trojan:OSX/Loosemaque.A appears to be a video game, but deletes files from the user home folder when a user plays it.
This malware is notable not only for being one of a relatively small handful of malware on one of the Macintosh platforms, it is also the only such trojan so far to use a game as its payload.
It is also unusual in that its developer specifically states its actions on the website where it is available, as well as on the splash screen of the game itself:
Execution
Trojan creates a folder containing game content, with the name lose lose folder.
On execution, users are able to play a Space Invaders look-a-like game (see screenshot below). When the user shoots an enemy character however, a file or folder in the user's home directory will be deleted.
If the user character is destroyed, the game ends. The Trojan subsequently sends the user's score to a remote server and deletes itself from the compromised computer.
This malware is notable not only for being one of a relatively small handful of malware on one of the Macintosh platforms, it is also the only such trojan so far to use a game as its payload.
It is also unusual in that its developer specifically states its actions on the website where it is available, as well as on the splash screen of the game itself:
Execution
Trojan creates a folder containing game content, with the name lose lose folder.
On execution, users are able to play a Space Invaders look-a-like game (see screenshot below). When the user shoots an enemy character however, a file or folder in the user's home directory will be deleted.
If the user character is destroyed, the game ends. The Trojan subsequently sends the user's score to a remote server and deletes itself from the compromised computer.