[Macpartners] Mac OSX first worm

[Linda LeBlanc]

The first worm designed for the OSX operating
system has been launched.

This is an "interactive worm" requiring action
on the part of the victim. It's a self-replicator
that is distributed through iChat on PowerPCs.
The payload is called variously:

latestpics.tgz         or
latestpics.jpeg (.jpg)

Unknown whether it is a mutating virus, names
are:

OSX/Leap (Leap-A) Sophos
OSX/Oomp

Information about OSX/Leap is located on VIL at:
http://vil.nai.com/vil/content/v_138578.htm

Detection
OSX/Leap was first discovered on 2006/02/16 and
detection was added to the 4698 dat files.
(Release Date: 2006/02/16).

It can be negated by upgrading to 10.4.5
(not currently supported by IS&T).