Threat Database Mac Malware Trojan-Downloader:Java/GetShell.A

Trojan-Downloader:Java/GetShell.A

By Domesticus in Mac Malware, Trojans

Usually, computer user are aware that there are many different malware threats targeting the Windows operating system, few aimed at Mac OSX computers, and that malware designed to infiltrate Linux operating systems are extremely rare. While the reasons for this are varied, depending on the relative market distribution of these operating systems and each system's vulnerabilities, there is no denying that malware targeting computers with Linux and Mac OSX operating systems are on the rise. Trojan-Downloader:Java/GetShell.A is a malicious JavaScript Trojan that attempts to determine the victim's computer's operating system and then connects to an obscure server to download a backdoor Trojan for that operating system. Trojan-Downloader:Java/GetShell.A has been detected on a Colombian transport website which has since then been fixed. However, Trojan-Downloader:Java/GetShell.A sets a worrying precedent which should encourage Mac OSX and Linux computer users to ensure that their computer system is fully protected.

How Trojan-Downloader:Java/GetShell.A Can Target Non-Windows Operating Systems

One of the reasons why viruses and Trojans are relatively uncommon on Mac OSX and Linux platforms is the fact that these operating systems are programmed in a way that makes them particularly resilient to these kinds of malware threats. However, ESG security researchers have noticed a significant increase in the number of malware threats that use other methods in other to enter a computer system. These include exploiting vulnerabilities in third-party software, such as Java or Adobe Flash; using social engineering in order to convince the victims themselves to infect their own computer system; or both approaches at the same time. Trojan-Downloader:Java/GetShell.A uses known vulnerabilities in JavaScript while at the same time using a social engineering approach to convince the victim to approve the execution of the Trojan-Downloader:Java/GetShell.A malicious Java applet.

Trojan-Downloader:Java/GetShell.A indicates a worrying trend of multiple platform malware that can affect more than one operating system. These kinds of malware threats will infiltrate a computer system using a third-party program found on multiple platforms, such as Java. Trojan-Downloader:Java/GetShell.A is one such threat, using Java to enter a computer system, detect the computer's operating system, and then connecting to a remote server to download and install a backdoor Trojan specific to that operating system. The initial Trojan-Downloader:Java/GetShell.A attack will usually come from a hacked website where criminals will have inserted this malicious Java applet. This attack can come from usually harmless websites that have become compromised. Trojan-Downloader:Java/GetShell.A's social engineering component comes into play when the victim needs to authorize the execution of this malicious applet.

SpyHunter Detects & Remove Trojan-Downloader:Java/GetShell.A

File System Details

Trojan-Downloader:Java/GetShell.A may create the following file(s):
# File Name MD5 Detections
1. Java.class a65a6d0adf2d4eca0a1d640e9385c3ab 0

Trending

Most Viewed

Loading...