This trojan does the same thing that the previous versions did, which is to start up malicious DNS servers on your machine to spoof browsers into visiting malicious web sites. If your browser settings allow for automatic DMG mounting, an installer will start automatically when the DMG is downloaded, infecting your machine with the trojan. If one were to ignore the fact that ActiveX is a Windows-only technology and click "OK," a disk image with the trojan will be downloaded. Internet security purveyor Intego has identified the variant and dubbed it "." The company also warns us that the trojan is set to take advantage of the uninformed, the willfully ignorant, and those that don't use the company's VirusBarrier X5.Īpparently, visitors to certain porn sites (like the barely-disguised PornTube in the screenshot below) will get a pop-up dialog that informs the user that a "missing Video ActiveX Object" is needed to play the presumably NSFW video on the page. If its first appearance last November or its two subsequent appearances weren't enough to deter you from surfing sketchy porn sites or clicking "OK" in suspicious dialog boxes, it appears our friend the RSPlug has reared its ugly head once more.
0 kommentar(er)
