More Mac Malware Masquerades As Pirated Apps

Trend Micro is reporting that another variant of the JAHLAV family of Mac malware has been found in the wild masquerading as pirated versions of legitimate applications.

This version pretends to be Foxit Reader or one of several antivirus programs. Previous versions pretended to be QuickTime.

The malware "modifies the system's DNS settings, allowing malicious users to be victimized by phishing attacks, or surreptitiously redirecting them to sites which might harbor malicious exploits ". Trend Micro's products detect the threat as OSX_JAHLAV.I