As will probably be the case more often than most Mac users want to admit – another OSX trojan has been spotted in the wild.  As reported by Securelist, Kapersky Labs and Sophos, this new malware, dubbed Backdoor.OSX.SabPub.a (or just SabPub, for short), uses Java exploits (just as reported with the “Flashback trojan”) to infect a Mac.

There is also reported to be at least two variants of this trojan – one of which exploits Microsoft Word, not Java.  After infecting a given Mac, this Trojan is like most: it connects to a remote website using HTTP in typical command and control (C&C) fashion to fetch instructions from remote hackers telling it what to do.  The backdoor contains functionality to take screenshots of the user’s current session, upload and download files, as well as execute commands remotely on the infected machine.  Encrypted logs are sent back to the control server, so the hackers can monitor activity.

Contrary to what MOST Mac users think, this latest Trojan further underlines the importance of protecting Macs against malware with an updated anti-virus program as well as the latest security updates.  If you haven’t already, check for and install any available updates for your Mac AND find a good anti-virus program for Mac OSX.  Kapersky Labs makes a Mac-compatible anti-virus program which you can find here.  Intego also makes a Mac-compatible anti-virus program, which you can find here.  Both of the programs listed above have costs associated with them.  If you are looking for a free product, try the free anti-virus for Mac by avast! found here.

A trojan horse virus discovered earlier this year has reportedly now been found to affect more that half a million Mac computers worldwide.  Russian anti-virus vendor Dr. Web has discovered that malware called “BackDoor.Flashback.39″ is currently present on at least 600,000 Macs.  The trojan has the capability to use a java vulnerability to intercept passwords and other private data, and then transmit the information back to the person or group that deployed it.  Flashback malware first appeared in September 2011, but that version depended on social engineering tricks where users were involved in order to spread (it originally tried to fake users out by posing as an Adobe Flash installer).  The newer version, by contrast, simply exploits Java and does what it needs to on the sly.

Security experts at F-Secure have published a simple guide to help Mac users determine whether or not they are infected, and then remove any malicious files from their computers that are tied to the Flashback trojan.

Manual Removal

Caution: Manual disinfection is a risky process; it is recommended only for advanced users. Otherwise, please seek professional technical assistance. F-Secure customers may also contact our Support.
Manual Removal Instructions

• 1. Run the following command in Terminal:

  defaults read /Applications/Safari.app/Contents/Info LSEnvironment

• 2. Take note of the value, DYLD_INSERT_LIBRARIES
• 3. Proceed to step 8 if you got the following error message:

  “The domain/default pair of (/Applications/Safari.app/Contents/Info, LSEnvironment) does not exist”

• 4. Otherwise, run the following command in Terminal:

  grep -a -o ‘__ldpath__[ -~]*’ %path_obtained_in_step2%

• 5. Take note of the value after “__ldpath__”
• 6. Run the following commands in Terminal (first make sure there is only one entry, from step 2):

  sudo defaults delete /Applications/Safari.app/Contents/Info LSEnvironment

  sudo chmod 644 /Applications/Safari.app/Contents/Info.plist

• 7. Delete the files obtained in steps 2 and 5
• 8. Run the following command in Terminal:

  defaults read ~/.MacOSX/environment DYLD_INSERT_LIBRARIES

• 9. Take note of the result. Your system is already clean of this variant if you got an error message similar to the following:

  “The domain/default pair of (/Users/joe/.MacOSX/environment, DYLD_INSERT_LIBRARIES) does not exist”

• 10. Otherwise, run the following command in Terminal:

  grep -a -o ‘__ldpath__[ -~]*’ %path_obtained_in_step9%

• 11. Take note of the value after “__ldpath__”
• 12. Run the following commands in Terminal:

  defaults delete ~/.MacOSX/environment DYLD_INSERT_LIBRARIES

  launchctl unsetenv DYLD_INSERT_LIBRARIES

• 13. Finally, delete the files obtained in steps 9 and 11.

Note:

Some Flashback variants include additional components, which require additional steps to remove.

Please refer to our Trojan-Downloader:OSX/Flashback.K description for additional information and removal instructions.

Once you have determined that your system is clean or applied the fix listed above, you should ensure that the vulnerability that allowed the virus has been addressed.  See below:

Apple has issued an update that brings Java up-to-date and patches these vulnerabilities.

The patch is available via Software Update for systems that have Java installed, but can also be downloaded from the following Apple support Web pages.  The update is available only for OS X 10.6 and 10.7, since Apple has stopped supporting prior versions of OS X.

• Java for Mac OS X 10.6 Update 7
• Java for OS X Lion 2012-001

Unfamiliar with Instagram?  According to the Instagram website:

It’s a fast, beautiful and fun way to share your photos with friends and family.

Snap a picture, choose a filter to transform its look and feel, then post to Instagram. Share to Facebook, Twitter, and Tumblr too – it’s as easy as pie. It’s photo sharing, reinvented.

The release date for Instagram’s Android app has yet to be annouced, however, a signup page for the Android version of this software is live and allows for users to sign up to be “first in line” for this software when it is released.  Access the signup page here.

As an iOS exclusive, Instagram has already racked up more than 27 million registered users, making it one of the App Store’s most popular photography apps.

The new iOS build brings Japanese language support for Siri along with a number of additional updates.  While most languages have already been available for iOS, Japanese is a new arrival.

iOS 5.1 is also supposed to hold the promise of enhanced battery life, something that most iPhone 4S users have been clambering for  since the device’s release.

When attempting to update your device, be prepared to be without it for a while.  The update can take a few hours, depending on your connection speed and the amount of users attempting the upgrade at the same time.

As always, those operating with jailbroken versions of iOS, it’s a good idea to avoid those firmware updates, because you’ll likely lose your jailbreak.

“Read first, think about it, then click!”

Essentially, what I am advising users is that most of the issues that they have are self-inflicted.  Most software issues (Viruses/Malware and unexpected software) on their system was unknowingly installed by the user.  To give the end user some credit, it isn’t really their fault.  Unfortunately, some of the software and software updates that get installed on users’ systems, attempt to package other software with them.

I have included three examples of commonly installed software and their installation screens.  Shown in these screen shots are the additional software that would be installed automatically if you just flew through the installation without really reading and without DE-selecting that you wanted this additional software.  Do you have McAfee Security Scan software on your computer?  Want to know how it got there?  If you updated your Adobe Flash Player software and didn’t pay attention, then YOU installed McAfee Security Scan.

Have you installed or updated Adobe Shockwave Player?  If you didn’t pay attention, then YOU installed Norton Internet Security.  Anyone who knows me, knows that I am not a fan of either of these pieces of software.  They are better than having nothing at all on your system, but they just aren’t that good.  In my opinion, having either of these on your system, gives you a false sense of security.  Most people who have this software installed, tend to still fall victim to malware and virus infections.

Installed or updated Java lately?  If you did not pay attention, then YOU have also installed the Ask Toolbar.  In addition to the software installers listed in this article, I have seen others attempt to additional software as well.

To wrap up, I will continue to advise users to be careful and diligent when installing software on your systems.

Read, digest, and click.

Upon release of Google+, the was an app for Android (of course) – and an app for Apple iOS.  BlackBerry devices weren’t being shown any love.  At this point, I’m not sure how much usage Google+ is getting, but having an app on your mobile device definitely helps.  This release is still in beta format, so there may be some bugs in it and some features are yet to be supported.

Features of the Google+ app for BlackBerry include:

• View your stream, post to your stream, checkin, upload photos to your stream
• View your photos and photos from people in your circles
• Add, edit, delete people and circles
• View and edit your own Google+ profile
• Support for all BlackBerry OS 5 and above devices except the BlackBerry PlayBook

Some features of the Google+ app for BlackBerry that are not yet supported include Instant Upload and Google+ Messenger.

The free app is called App For Google+ and is now live in BlackBerry App World.  You can install the app from BlackBerry App World by doing a search for the app, or by clicking the BlackBerry menu key while in App World and selecting “Scan a Barcode” and scan the barcode included in this post.

New BlackBerry PlayBook OS 2.0 features include:

• Integrated email client with a powerful unified inbox: With BlackBerry PlayBook OS 2.0 you have the option to use a  unified inbox that consolidates all messages in one place, including messages from Facebook®, LinkedIn® and Twitter®, as well as personal and work email accounts.
• Social Integration with Calendar and Contacts apps:  The built-in calendar harnesses information from social networks and makes it available where and when users need it.  Contact cards are also dynamically populated with updated information from Facebook, Twitter, and LinkedIn to create a consolidated view of contacts.
• Updated BlackBerry Bridge app: BlackBerry® Bridge™ is a unique app that provides a Bluetooth® connection between your BlackBerry PlayBook and core apps on your BlackBerry® smartphone (including BBM™, Email, Contacts, Calendar and Browser) in order to let you view the content on the larger tablet display. With BlackBerry PlayBook OS 2.0, it’s easier and quicker than ever to take documents, web pages, emails and photos that appear on your BlackBerry smartphone and display them on your BlackBerry PlayBook for an optimized viewing and editing experience. The updated BlackBerry Bridge app also provides a new remote control feature that allows a BlackBerry smartphone to be used as a wireless keyboard and mouse for a BlackBerry PlayBook.
• Improved mobile productivity: Updated document editing functions, the new Print To Go app, and increased control and manageability of corporate data with BlackBerry® Balance ™ allow you to get more out of your BlackBerry PlayBook every day. Plus, an updated virtual keyboard with auto correction and predictive next word completion learns how you type to enable faster, more accurate typing.
• New apps and content: Thousands of new apps are being added to BlackBerry App World™ today (including a range of Android® apps that will run on the BlackBerry PlayBook). A new BlackBerry Video Store1 is launching today. Enhanced web browsing capabilities are also available with BlackBerry PlayBook OS 2.0.

You can learn more about the BlackBerry PlayBook on the RIM website here.  Check out the CrackBerry.com video showing the PlayBook Video Chat feature here:

Just like Siri, Vlingo turns your words into action on the device.  Need directions?  Want to send a text?  Want to update your Facebook status?  Want to make a call?  Vlingo can do all of that and more!

Below are some examples of what Vlingo can do:

Connect with friends and family…

“Where are my friends?”

“Update Facebook status; Headed to New York for the weekend!”

“Call Mom”

“Text Laura; Want to see a movie tonight?”

“Email John; Subject, Running Late; Message, John, I’ll be 10 minutes late for the meeting.”

Find businesses and things to do…

“Call plumber”

“Find a sushi restaurant”

“Movie times in Boston”

“Beachfront hotels in Miami”

“Call Best Buy”

And navigate through your daily life…

“What does poison ivy look like?”

“Get directions to 1600 Pennsylvania Ave”

“Open alarm clock”

See Vlingo in action:

Vlingo is currently available for BlackBerry users for FREE as part of the RIM Thank You Gift program for the recent BlackBerry outage.  Download Vlingo from the BlackBerry App Store for free here.  Other smartphone users can get info/download Vlingo from www.vlingo.com.

Verizon Wireless has offered prepaid plans since 2000, but previous plans offered services only a la carte — for example, voice calling for $1.99 a day, mobile Web for 99 cents a day and unlimited texting for $20 per month.

In an effort to compete with MetroPCS and Sprint-owned Boost and Virgin Mobile, Verizon Wireless will introduce a brand new $50 monthly prepaid plan starting on September 15th, that includes unlimited text, talk and web.

Shop for Verizon prepaid phones via the Verizon Wireless website here.

Sprint has a large presence in the prepaid market and offers an unlimited plan through Boost Mobile for $35 a month. MetroPCS also offers an unlimited data prepaid plan, which is less expensive than Verizon’s at $40 a month.  Verizon is likely banking on the strength of its network to distinguish its prepaid option from the competition.

Verizon spokeswoman Brenda Raney told Dow Jones Newswires that the plan will include unlimited voice, texting and Web usage for $50 per month, and will be available at Verizon stores and through Best Buy, Target and Walmart stores.

“This is a very competitive market, and we want to make sure we have a price portfolio to fit a greater number of customers,” Verizon’s Raney said. “In these times, there are some people who would prefer living on a prepaid plan.”

If  you are looking for the convenience of a cell phone without the commitment of a 1-year or 2-year contract, but are looking to have a phone with strong network coverage, this may be the deal you are looking for.