OSX.RSPlug Trojan

OSX.RSPlug Trojan

Aliases	OSX.RSPlug (Intego) OSX/RSPlug (Sophos) OSX/DNSChanger (F-Secure) OSX/Puper (McAfee) OSX.RSPlug (Symantec) Trojan.OSX.RSPlug (PC Tools)
Type	Trojan Horse

OSX.RSPlug Trojan, also known as OSX/DNSChanger and OSX/Puper was a family of Trojan horses malware targeting the Macintosh platform. The first incarnation of the trojan, OSX.RSPlug.A, was discovered on October 30, 2007 by Mac Security Vendor Intego.^{[1] [2]}

The RSPlug Trojans where found on several pornographic sites disguised as video codecs. Security firm F-Secure has discovered 32 variants of the original A strain of the Trojan.

References

1. ^ Mac OS malware targets porn surfers, CNet, 2007-10-31, http://news.cnet.com/8301-13579_3-9808489-37.html, retrieved 2010-07-24 
2. ^ INTEGO SECURITY ALERT - October 31, 2007, Intego, 2007-10-31, http://www.intego.com/news/ism0705.asp, retrieved 2010-07-24