OSX/Rootkit.Weapox [Threat Name] go to Threat

OSX/Rootkit.Weapox.A [Threat Variant Name]

Category trojan
Size 27608 B
Detection created Nov 06, 2007
Signature database version 2641
Aliases OSX.Weapox (Symantec)
  OSX/Weapox (McAfee)
  Rootkit.Mac.Weapox.a (F-Secure)
Short description

OSX/Rootkit.Weapox.A is a trojan that can interfere with the operation of certain applications. It uses techniques common for rootkits. The OSX/Rootkit.Weapox.A is probably a part of other malware.

Installation

The trojan must be manually installed.

Other information

The trojan hooks the following Mac OS X APIs:

  • setuid
  • kill
  • chmod
  • write

It can execute the following operations:

  • hide network communication on a certain port
  • mask the logged in user
  • change the privileges of a running process

Please enable Javascript to ensure correct displaying of this content and refresh this page.