This week’s version of the RSplug Trojan horse – OSX/RSPlug.N for those who want to keep their scorecards up to date – is found in an odd download. A web page offering cracks and keygens (tools that generate serial numbers) provides Mac OS X Leopard 10.5.4 for download, together with a crack and a keygen. There are a couple of reasons why this is clearly bogus. First, Mac OS X doesn’t use a serial number, and never has. So no crack or keygen is required. Second, as you can see in the screen shot below, the supposed download is for “AMD and Intel Platforms”. Mac OS X has never been available for AMD processors.
So, another version of this ubiquitous Trojan horse has been thwarted by Intego’s Virus Monitoring Center. The latest virus definitions for VirusBarrier X5 protect against this and all other variants of the RSPlug Trojan horse.