Oops: Macvirus.org hosting prOno malware fest

Just a bit of irony that I got today from my colleague Juha Kauppinen. Macvirus.org, a website dedicated to “keeping an eye on Mac viruses”, has had their discussion forums seeded with vast amounts of forum spam pushing various junk and lots of hardcore porn, including a number pushing malware (fake codecs).

Amacvirus123888

Amacvirus123888a

Here’s one pushing fake codecs for both Mac and Windows platforms (the site serving the fake codec simply detects your user agent and delivers the appropriate malware). I picked up a couple of samples: Mac Virustotal report here, Windows Virustotal report here.

Macvirus123888c

Hmm… a Mac virus being pushed on a Mac forum.

In fairness, the site looks like it hasn’t been updated in a long time. Still, rather embarrassing for these folks…