New Mac Trojan Disables Security, Steals Passwords

The Macintosh platform is again under attack by malicious code writers. This time, it’s multiple variants of a Trojan horse that could compromise machines running Mac OS X 10.4 or 10.5. The Trojan, distributed as either a compiled AppleScript called ASthtv05 or as an application bundle called AStht_v06, exploits a recently discovered vulnerability with the Apple Remote Desktop agent. The ARD allows the Trojan to run as root