Mac Trojan appears as QuickTime update on malicious Web sites

Edited by Joe Aimonetti

TrendMicro is reporting that a Trojan targeting Mac users, known as OSX/Jahlav-D, is appearing as a QuickTime plug-in update called MacCinema Installer.

This Trojan is a DNS Changer Trojan, similar to the OSX/Jahlav-C Trojan that was linked to several malicious sites in June and profiled here.

TrendMicro reports:

"It arrives as a .DMG file that contains an installer package. The said installer package contains component files and malicious scripts. These malicious scripts are detected by Trend Micro as UNIX_JAHLAV.D."

Resources
Read the macnn article.
Read the TrendMicro report.

Experiencing problems? Have feedback? Let us know!
You can now follow MacFixIt on Twitter!

Resources

profiled here

macnn article

TrendMicro report

Let us know!

Twitter!

More from Late-Breakers