ZDNet’s Ryan Naraine is reporting that pirated copies of Apple’s iWork 09 circulating on BitTorrent and elsewhere are infected with Mac malware.
According to Mac AV vendor Intego the malware is known as OSX.Trojan.iServices.A. The pirated software is complete and functional but the installer has an additional package, named iWorkServices, that contains the attack. It may ask the user for an administrator password, depending on the version of OS X. After it installs it phones home to a remote server to report that it is installed and awaits remote commands, including the installation of additional software. It loads at boot time and has root access.
Sounds very much like a conventional Windows bot. Naraine quotes Intego as saying that at least 20,000 Macs had already downloaded the infected installer.
Looks like Norton and McAffee are gonna start making more money.