Mac users advised to stay away from BitTorrent copies of the app suite

Jan 23, 2009 09:07 GMT  ·  By

The latest version of Apple's iWork suite contains major updates that even hackers couldn't resist. Reportedly, pirated versions of the software have made their way on torrent sites weighing in a tad more than the original package.

Several sources, including security firms, are acknowledging that pirated copies of iWork '09 available for free download via torrent sites have been infected with a trojan horse. Dubbed OSX.Trojan.iServices.A, the installer disguises itself as iWorkServices. Once launched, iWorkServices subsequently becomes a startup item with full root privileges. It connects to a remote server informing a hacker that they have access, at which point the hacker can start nosing around a user's computer. Over 20,000 people are believed to have downloaded infected copies of iWork '09 so far.

Ironically, Apple recently announced that “iWork '09 retail boxes no longer come with a serial number. Install iWork '09 from the enclosed disc and you're ready to go,” reveals an Apple Support document.

“Though retail versions of iWork '09 no longer come with serial numbers, you will need a serial number if you are using the iWork '09 trial version and decide to purchase the fully-functional version of iWork '09,” says Apple. “To upgrade to a fully-functional version of iWork '09, open any of the trial applications. Click the 'Buy' button and enter the requested information. An email will be sent to you with the serial number you need to upgrade,” the company explains. This is not the first time Apple approaches its application suites this way. The company has previously lifted “CD-Key” necessities off its iLife suite of applications.

Needless to point out, Mac users are advised not to download pirated copies of iWork '09 off the Internet. And remember, you can't see the trojan installer unless you view every package in the installer bundle. By doing a full install of the infected iWork suite, you are prompted only once to enter your administrator password.