Posted: 31 Aug 2009
An Apple-specific DNS changer Trojan has been detected by Trend-Micro. It is named JAHLAV-K and it comes in a mountable Disk Image File (.dmg).
If users get infected with this file, their browsers would redirect to phishing sites and some of them would also redirect to sites that offer fake anti-virus programs.
Sophos warns that the pirated version of “Foxit Reader for Mac” comes with this trojan. “While imitation may be the sincerest form of flattery, we are not happy about the recent malware attacks masquerading as our Foxit Reader,” said the vice president of sales and marketing at Foxit Corporation.
Source: The Register