iThreats

The distribution technique of known prevalent Mac trojan – known as “MacCinema” is starting to adopt typo-squatting to increase its chances of infection.

More Mac users reporting this threats where they’ve usually spotted when searching for videos, although pirated or cracked copies of known installer is also on the top its social engineering bait.

However, typo-squatting is an emerging trend used by this trojan.

Definition: Typosquatting is an act of registering domain names that resembles to legitimate ones through closely and similarly sounding words and spelling.

By deploying typosquatting attack, Internet user could get into attackers trap by just mis-typing the word although a combination of social engineering reaches more users and increases attackers chances for infection.

Here are the list of examples:

For some people wondering how and why Mac users are getting tricked, then this is one of them!   (although, most affected users don’t remember and notice it)

I’ll include and discuss this next month in VB2009 conference @ Geneva, Switzerland.

Recent related updates:

Mac OS X DNS-Changing Trojan in the wild

More reports of Apple Mac Trojan horse seen in the wild

PC and Mac malware in the same boat