New Jahlav Mac Trojan variant

Our HoneyPots found a new variant of the Jahlav Trojan, targeting Mac OS X:

The “dmg” file is hosted on yescrome.com:

So far, only Sophos detects this piece of malware.

Edit: I meant to say that only Sophos detects this sample out of all the AV vendors on Virus Total.

I have been informed that Intego VirusBarrier X5 also detects this Trojan. For more info about Mac security, go to their blog.

Jerome Segura

Malware ID: 428143005e07e510302ba431fe0c28cc.zip