It’s a sad day when a Mac virus starts making the rounds, but it just goes to show that no one is safe from the prying eyes the internet underbelly. The virus itself appears to be originating from several pornography sites. The sites in question feature a number of still photos that appear to link to downloadable videos. Once clicked, the user is led to a page with the following prompt:
Quicktime Player is unable to play movie file.
Please click here to download new version of codec.
Clicking the provided link begins DMG file download. Once the DMG file is executed the Trojan installs, allowing for external Root access. Yikes! To be fair, anyone frequenting such sites should know better than to download shady files, but if you’re a Mac user with a penchant for porn, use protection. Sorry.
