Mac trojan horse spotted, installs malicious DNS server


A shiny new Mac trojan was discovered yesterday, so best be careful when you’re surfing shady Web sites looking for “Disney” or other innocent-sounding things. The trojan, named OSX.RSPlug.A Trojan Horse by Intego, installs itself on your Mac disguised as a video codec. Once installed, it changes your machine’s DNS server to redirect all Web inquiries to malicious Web sites. Going to won’t take you here, but to some jerk’s phishing scam site.

The best way to protect yourself is to be smart and not install unknown applications. If, for whatever reason, you find yourself infected, there’s a few ways to remove the trojan. You could go the easy route and buy a commercial virus blocker for OS X or mess around with a few commands in Terminal. I guess it depends on your level of computer skills to decide which avenue works best.

Trojan Horse warning: What you need to know [Macworld]