Good job you don't need anti-virus on Macs..

[GeekBoy]

www.securemac.com/applescript-tht-trojan-horse.php

oooh - an exploit.. .."but that doesn't happen to Macs".. ...."we've run without anti-virus for years.. ..you don't need it", etc.

oooops. Perhaps time for a re-think.

Yes I am a Mac user..

Yes I run anti-virus.

:-p

"The user must download and open the Trojan horse in order to become infected."

You still don't need anti-virus if you've got half a clue.

No I'm not a Mac user.

No, I don't run AV on my main system, except on those rare occasions when I'm running Windows.

Yep -you also don't need anti-virus on a PC (Windows based) if you've got 1/2 a clue.. ...but PC (Windows) people typically don't condsider themselves threat-free in the same way mac people typically do.. ;-)

The problem with this exploit is that it bypasses the normal 'this action requires a password' mac behaviour by having the suid bit set.. ...so Mr/Miss happy safe Mac user is not aware the application they've happily limewire'd/IM downloaded is actually not very nice at all.