Pirated iWork '09 installer may contain trojan horse
Intego, makers of VirusBarrier and other security software for the Macintosh, issued a security alert for Mac users on Thursday, advising them about the existence of a new Trojan Horse, which they’ve named OSX.Trojan.iServices.A. This new Trojan Horse can be found in pirated copies of Apple’s iWork ’09 application suite, which has been downloaded over 20,000 times, according to Intego’s numbers.
Seriously… if you’re going to pirate iWork, at least work from Apple’s trial version.
This is not a virus—it cannot spread from one Mac to another on its own. It’s also not a remote exploit; the user must download and install a pirated copy of iWork ‘09 to become infected. To check if you’ve been infected, look in /System/Library/StartupItems for an item named iWorkServices. If it exists, you’ve been infected with this Trojan horse.