New Trojan Targets Macs, Inserts Ads Into Webpages

POST

MAIL

Posted March 21, 2013 at 3:43pm by iClarified

Trojan.Yontoo.1, a trojan that targets Mac users, has been increasing in number since the beginning of the year, reports Dr. Web. The trojan inserts ads into webpages on the infected computer.

To spread the Trojan, criminals crafted movie trailer pages that prompt users to install a browser plugin. In fact, the prompt only imitates a common dialogue displayed when a plugin needs to be installed or additional configuration is necessary. After clicking on ‘Install the plug-in’, the user is redirected to another site from which Trojan.Yontoo.1 is downloaded.

While an infected user surfs the web, the plugin then transmits information about the loaded pages to a remote server. In return, it receives a file that can embed third-party code into the webpages. For example, you can see ads injected into an Apple webpage in the screenshot below...

Dr. Web says that its software detects the trojan as Adware.plugin.

Read More [via MacRumors]

New Trojan Targets Macs, Inserts Ads Into Webpages

Follow iClarified

JonaㅜㅐㅅN - March 25, 2013 at 1:03am

When trying to install the plugin, look at the installer name: FreeTwitTube. While this was a plugin allowing you to tweet on YouTube vids, this was trying to disguise itself as THAT plugin.

Reply · Like

alain.j - March 22, 2013 at 9:26am

totally agree with Rod! i wouldn't even call this a trojan, i would call it a plugin that YOU manually install on YOUR mac, that connects to a server and shares information. Apple and anti-viruses shouldn't be worrying about people scrambling their macs on their own!!

Mirko Trojan - March 21, 2013 at 5:13pm

Hey! I am not targeting anyone ! :D

Wood1030 - March 21, 2013 at 4:26pm

I see that Safari browser is depicted in this story but, does it matter what browser is used to be vulnerable to this Trojan, or can we use anther to avoid said trojan?

Joe - March 21, 2013 at 4:21pm

Uninstall the plugin.

Gonzalez - March 21, 2013 at 4:19pm

How do I remove this Trojan?

DigiHead - March 22, 2013 at 8:23am

Wait for week or so, apple will release security update and all this crap will be gone