New variant of RSPlug Mac trojan
A new variant of the RSPlug trojan, which targets Apple machines, was recently discovered in the wild, but quickly was fixed, Jamz Yaneza, a threat researcher with anti-malware firm Trend Micro, told SCMagazineUS.com Monday.
Although “dead” now, the latest incarnation of the trojan was distributed through websites offering “warez” -- hacker-speak for pirated software, Yaneza said. It would have caused an infected user's browser to redirect to a phishing or malware-serving site. It had less functionality than older variants though, indicating that it was likely the work of copycat hackers.
The first variant of the RSPlug trojan dates back to October 2007, then distributed through pornography sites. Users were told they needed to download a codec to view a video, which was actually the trojan – a DNS changer used to hijack search results and divert web traffic.
