Intego malware researchers discovered a new kind of fake Flash Player updater, which uses Shell scripts to decode dropper(s) and infect Macs with malware, identified as OSX/Shlayer.A, OSX/Shlayer.B, and OSX/Shlayer.C.