Today, we have found a Mac OS X trojan. It is usually said that only windows users should be worried by malware. As we show today, this is not true.

It all starts with a lot of porn sites:

They all host some videos with names like: Download Sample Movie, Free movie clip, Get movie clip

This malware hides as a QuickTime plugin. When you try to download a video file, you are encouraged to download this plugin. It also, asks the user for the administrator password, in order to get installed.

Once installed, it runs a script that changes de DNS configuration, to redirect users to phishing sites of banks, eBay, or Paypal.

As always, be careful!

Thanks to Adrian and Oscar for this one.