Today, we have found a Mac OS X trojan. It is usually said that only windows users should be worried by malware. As we show today, this is not true.
It all starts with a lot of porn sites:
They all host some videos with names like: Download Sample Movie, Free movie clip, Get movie clip
This malware hides as a QuickTime plugin. When you try to download a video file, you are encouraged to download this plugin. It also, asks the user for the administrator password, in order to get installed.
Once installed, it runs a script that changes de DNS configuration, to redirect users to phishing sites of banks, eBay, or Paypal.
As always, be careful!
Thanks to Adrian and Oscar for this one.