Mac Malware Targets Dalai Lama Supporters

Fresh malware targeting Mac OS X has been seen spewing out of a website related to the Dalai Lama, a significant figure in Tibetan Buddhism.

The Dockster malware is using a Java-based exploit to break into people’s machines, security company F-Secure warned. The site in question is gyalwarinpoche.com, and is not the official dalailama.com site, although it appears the two are related.

The malware itself has one similarity with the Flashback malware, which hit over 600,000 Mac machines, as they both exploited the same vulnerability.

Dalai Lama sites targeted

“Current versions of Mac OS X and those with their browser’s Java plugin disabled should be safe from the exploit,” an F-Secure blog read.

“The malware dropped, Backdoor:OSX/Dockster.A, is a basic backdoor with file download and keylogger capabilities.” The malware can also infect Windows users.

This is not the first time Dalai Lama supporters have been targeted. In November, Sophos said it had spotted a variant of the Imuler Mac Trojan spread alongside images of Tibetan organisations.

Earlier this year, Tibetan non-governmental organisations were targeted by another Mac Trojan, called MacControl.

Fingers have pointed at China in attacks on Tibetan digital infrastructure. China says it will decide who the next Dalai Lama is, but the current Dalai Lama has claimed the next in line could either be a woman or come from outside of Tibet.

In September, security firm AlienVault said it had discovered the creator of the PlugX Remote Access Tool (RAT), which had been used by hackers from various countries to target Tibet. The creator hailed from China.

Think you’re a security pro? Try our quiz!

Thomas Brewster

Tom Brewster is TechWeek Europe's Security Correspondent. He has also been named BT Information Security Journalist of the Year in 2012 and 2013.

Recent Posts

Apple Sales Rise 6 Percent After Early iPhone 16 Demand

Fourth quarter results beat Wall Street expectations, as overall sales rise 6 percent, but EU…

22 hours ago

X’s Community Notes Fails To Stem US Election Misinformation – Report

Hate speech non-profit that defeated Elon Musk's lawsuit, warns X's Community Notes is failing to…

23 hours ago

Google Fined More Than World’s GDP By Russia

Good luck. Russia demands Google pay a fine worth more than the world's total GDP,…

24 hours ago

Spotify, Paramount Sign Up To Use Google Cloud ARM Chips

Google Cloud signs up Spotify, Paramount Global as early customers of its first ARM-based cloud…

2 days ago

Meta Warns Of Accelerating AI Infrastructure Costs

Facebook parent Meta warns of 'significant acceleration' in expenditures on AI infrastructure as revenue, profits…

2 days ago

AI Helps Boost Microsoft Cloud Revenues By 33 Percent

Microsoft says Azure cloud revenues up 33 percent for September quarter as capital expenditures surge…

2 days ago