Intego Security Alert: OSX.RSPlug.A Trojan Horse
Posted on by Peter James
A malicious Trojan Horse has been found on several pornography web sites, claiming to install a video codec necessary to view free pornographic videos. If users install this Trojan horse, it uses a sophisticated method to change the Mac’s DNS server (the server that is used to look up the correspondences between domain names and IP addresses for web sites and other Internet services). When this new, malicious, DNS server is active, it hijacks some web requests, leading users to phishing web sites (for sites such as Ebay, PayPal and some banks), or simply to web pages displaying ads for other pornographic web sites.
For full information, see this Intego Security Alert.