The company’s antivirus software can allegedly detect and eradicate the malware

Jun 2, 2010 12:35 GMT  ·  By
A screenshot depicting Intego's VirusBarrier X6 antivirus software detecting OSX/OpinionSpy
   A screenshot depicting Intego's VirusBarrier X6 antivirus software detecting OSX/OpinionSpy

Intego has issued a security memo claiming to have discovered a spyware application that is downloaded as a result of installing a number of freely distributed pieces of Mac software. These include screen savers (particularly those developed by a company called 7art), and one application. The spyware is dubbed OSX/OpinionSpy.

Intego develops and sells desktop Internet security and privacy software for Macs. According to the company’s latest advisory, the malware in question “performs a number of malicious actions, from scanning files to recording user activity, as well as sending information about this activity to remote servers and opening a backdoor on infected Macs.”

“OSX/OpinionSpy is installed by a number of applications and screen savers that are distributed on sites such as MacUpdate, VersionTracker and Softpedia,” the security firm acknowledged yesterday, following with a post containing a “preliminary list of applications that install OSX/OpinionSpy spyware.” After carrying out an investigation, we concluded that no applications fitting Intego’s description were being offered through our website, while the screen savers in question were immediately removed.

“[…] This application that purports to collect information for marketing reasons does much more, going as far as scanning all the files on an infected Mac,” Intego further stressed. “Users have no way of knowing exactly what data is collected and sent to remote servers; such data may include user names, passwords, credit card numbers and more. The risk of this data being collected and used without users’ permission makes this spyware particularly dangerous to users’ privacy.”

While the spyware itself is not contained in these applications, according to Intego, “[It] is downloaded during the installation process. This shows the need for an up-to-date anti-malware program with a real-time scanner that can detect this malware when it is downloaded by the original application’s installer,” the firm explained in its original advisory.

As usual, the self-touted Mac security expert pushes its $50 VirusBarrier X5 and X6 applications onto Mac users, alleging that they can effectively detect and eradicate this piece of malware. The antivirus software identifies the threat as “OSX/OpinionSpy.” VirusBarrier X5 and X6 have had their threat filters updated on May 31, 2010, the software vendor says.

The list of screen savers that allegedly install this spyware is provided in Intego’s June 1, 2010 security memo, which contains a “Preliminary List of Applications that Install OSX/OpinionSpy Spyware.” The only application leading to the installation of the spyware (or at least the only one found by the company so far) is a converter - “MishInc FLV To Mp3.”