Symantec Connect
  • Login
  • Register
  • Security
    • All of Connect
    • Backup and Archiving
    • Endpoint Management & Virtualization
    • Storage and Clustering
    • Security
    • Inside Symantec
    • Vision User Conference
    • Partners
    • Developers
    •  
  • Overview
  • Forums
  • Articles
  • Blogs
  • Downloads
  • Events
  • Videos
  • Groups
  • Ideas
Login to participate
Security ResponseRSS

OSX.Loosemaque: It’s Not Just a Game Anymore

Ben Nahorney
November 3rd, 2009
Tags: Endpoint Protection (AntiVirus), Emerging Threats, Evolution of Security, Malicious Code, Security, Security Response
Facebook Twitter

Threats targeting the Macintosh platform are much less common than those targeting Windows. The same can be said about video games, where Windows is the dominate platform of the two. Combining games and malware has happened before, but a Mac game performing malicious activities? That’s something relatively new.

Takashi Katsuki, one of our Tokyo engineers, came across just that today. The game looks to be a throw-back to the classic Space Invaders/Galaga style of games from the early 1980s. However, what brings this game into the realm of malicious code is that for every alien ship you destroy, the game deletes a file from your home directory.


What’s interesting is that the author of this “game” flat-out says what it does on his Web site. Reading through the author’s description, it seems that he has created this game/threat as some sort of artistic project. The aliens are your files and there are consequences for “killing” them. However, if you die, the game is supposed to delete itself. Each file of your home directory appears only once, and the author seems to suggest that not destroying any ships may end up with positive consequences. (We were unable to discover if this was the case, as the game crashes before reaching the end.)

While interesting in its own right, there’s nothing stopping someone with more malicious intentions from modifying it slightly and then passing it on to unsuspecting users, causing significant damage to a computer. As a result, we’re detecting this threat as OSX.Loosemaque.


Keep up with the latest security news from Symantec Security Response. Subscribe to our RSS feed.

0 (2 votes)
  • Ben Nahorney's blog
  • Comments RSS Feed

About Security Response Blog

Our security research centers around the world provide unparalleled analysis of and protection from malware, security risks, vulnerabilities, and spam.
Filter by:

Recent Blog Posts

  • Phishing Site Uses Katrina Kaif as Bait
    Mathew Maniyara - July 29, 2010
  • W32.Stuxnet Variants
    Liam O Murchu - July 29, 2010
  • Tracking Cookies
    Ben Nahorney - July 28, 2010
  • After Football, Scammers Pursue the Cricket World Cup
    Mathew Maniyara - July 28, 2010
  • Fraudsters Offering Free Mobile Phone Airtime
    Mathew Maniyara - July 28, 2010

Blog Tags

10.x 11.x 2010 State of Enterprise Security Report 419 scam 9.x and Earlier Adobe Acrobat Adobe Flash Adobe Reader Advanced Persistent Threats Amazon Antivirus2010 Apple Backdoor.Tidserv Backdoor.Trojan Brazil Brightmail Gateway Brightmail IQ Clickjacking Cricket World Cup 2011 DNS poisoning Earth Day Email Emerging Threats Endpoint Encryption Endpoint Protection (AntiVirus) Endpoint Protection Small Business Enterprise Security Manager Evolution of Security FIFA Father's Day Gary Coleman General Symantec Google ISTR XV IT Healthcare Landscape IT Risk Management Infostealer.Bancos Infostealer.Gampass Internet Security Threat Report Java Katrina Kaif Live PC Care Malicious Code Michael Jackson Microsoft Microsoft Patch Tuesday Misleading Applications Mobile & Wireless Mobile Security Mother's Day Online Fraud Orkut PDF PDF spam Password Management Restore SEO Poisoning Security Security Risks Security Trends 2010 Soccer Social networking South Africa Spam Survey Sykipot Symantec State of Spam & Phishing Report SymbOS.Exy Symbian Tmphider Tracking Cookie Trojan.Bredolab Trojan.Dropper Trojan.FakeAV Trojan.Loginck Trojan.Mebroot Trojan.Pidief Trojan.Pidief.I Trojan.Pidief.J Trojan.Twebot Trojan.Vundo Trojan.Zbot Trojan.Zlob Trojan.Zlob.P VirusDoctor Vulnerabilities & Exploits W32.Changeup W32.Downadup W32.Koobface W32.Qakbot W32.Sality W32.Stuxnet W32.Stuxnet!lnk W32.Temphid W32.Virut Windows World Cup 2010 World Expo 2010 Zeus directory harvest attack facebook fakeav phishing rogue antivirus rootkit scams social media twitter typosquatting volcano zero-day vulnerability
© 2010
  • Symantec Corporation
  • Contact Us
  • Get RSS
  • Privacy Policy
  • Symantec.com