Leap (computer worm)

The Leap or Oompa-Loompa computer virus is an application-infecting, network-spreading virus and worm for Mac OS X discovered in February 2006. It is delivered over the iChat instant messaging program as a compressed file called "latestpics.tgz". If the user uncompresses the file and runs the enclosed executable (disguised with the icon of an image), then the virus will attempt to infect their system.

In most cases, it will prompt for the computer's administrator password in order to gain privilege to edit the system configuration. It doesn't infect applications on disk, but rather when they are loaded, by using a system facility called "apphook". It then attempts to spread itself via the user's iChat buddy list.

• Analysis by Ambrosia Software
• Symantec Security Response - OSX.Leap.A