ALERT: New Mac OS X ‘Nugatory’ Trojan found on Web, deletes all iTunes music

Alert, Mac OS X users! Batten down the hatches because MacDailyNews is exclusively breaking the story of the discovery of a new Mac OS X Trojan that we’ve dubbed the “Nugatory” Trojan.

It is found on the Web (reproduced below) and consists of the following text message containing directions that, when followed, wil result in the deletion of all of the music files in the current user’s Music folder!

The “Nugatory” Trojan consists of just five instruction lines and works on any user who can understand the English language.

CAUTION! DO NOT FOLLOW IF YOU WISH TO KEEP YOUR MUSIC FOLDER’S CONTENTS INTACT!

1. On the machine you wish to subject to “Nugatory,” open the current user’s Music folder.
2. Type Command-A to select all of the Music folder’s contents.
3. Type Command-Delete to move the contents of the selction to the Trash.
4. Type Shift-Command-Delete to Empty Trash.
5. Click to “OK” button in the resulting dialog.

More info about how to protect yourself from the Mac OS X “Nugatory” Trojan here.

MacDailyNews Note: We’re sure it’s just a matter of seconds until someone launches Script Editor, records the “Nugatory” Trojan as an AppleScript applet, pastes a MS Word icon to it, and uploads it to P2P. We can only pray it doesn’t happen!

This article is intended as a public service in more ways than one.

Related MacDailyNews articles:
Intego says Mac OS X Trojan AppleScript applet in the wild – May 12, 2004

47 Comments

  1. Impeccable timing, MDN! Nice bitch slap to Intego and the rest of the “media” outlets that are jumping on the so-called Mac OS X trojan issue to try to hide/minimize Microsoft Windows’ wretched failures in the press.

  2. That’s it. I’m switching to a secure and stable platform.

    /seriously laughing at the media’s conniption fit over these “wretched security flaws that riddle OS X”

  3. The sad part is that I tried this trojan out on my iPod last month.

    I meant to clear my iTunes library because I was making one library of directories from multiple machines on my home network, plugged in the iPod to charge it, and forgot that iTunes automatically shifts over to the iPod library listing when the pod is plugged in–a feature I really, really dislike.

    So listen, MDN, back off–I wrote this Trojan and want proper credit!

  4. GET REAL

    Making fun of the current problem is not a solution.

    The whole world of independent software is at risk. Download what seems to be a cool little app from version tracker (great reviews and all) however, buried deep in the code is a script to delete x,y or z at a future date…

    with out warning!

    and if the user is in an admin account this could get real ugly real fast…

    think of all the little apps we have installed in the last few years since there was finally a robust independent community for the Mac again.

    I myself am quite worried.
    I am not an idiot about the operation of my computer.
    However, these dooms day events would happen with out my OK.

    PEOPLE THIS IS BAD

    We all could have trojans buried deep in our code just waiting for the correct moment to delete it all…

    Please someone tell me why I should not be worried.

  5. This is really stupid… If you minimize the problem everyone will just go on assuming that Macs will never have to face such dangers. By putting your head in the sand, you’re pretending that nothing serious will ever happen, and when something does happen you’ll be among the last to give the truth about it.

    Regarding the current trojan: it is real, and it is in the wild. Apparently it’s not rampant, so there’s no real worry, but as another poster points out, this rasies a lot of issuse for software developers who want people to try out their programs.

    Try and be realistic, rather than just acting like children. And read the reports and press releases; you’ve made several mistakes in your coverage.

  6. Why go half-way?

    1. For the biological unit you wish to submit to “Purgatory,” open your gun cabinet.
    2. Select any unsafed, loaded weapon.
    3. On error load and unsafe any weapon.
    4. Point weapon to head of biological unit.
    5. Press trigger.
    6. Email instructions to a buddy.

    This one leaves the files intact.

  7. anonymous/Sputnik: This “trojan” can be created for every OS that allows scripts to be created and allows users do delete files, I believe that is just about every OS.

    What everyone is trying to say is that the only fix is to remove your ability as a user to delete one of your own files. Think about it, that wouldn’t really make your computer very useful would it. Filled your hard drive, oh well time to buy another. Not.

    So it’s user beware.

  8. In addition to initial deletions of all music files on Mac, the following will delete backup files on iPod:

    1. Make sure “automatic update” is enabled.
    2. plug in iPod into FireWire jack.
    3. Automatic update will now delete all files from iPod to match iTunes content.
    4. Enjoy the “Sound of Silence”.

Reader Feedback

This site uses Akismet to reduce spam. Learn how your comment data is processed.