{"id":3579,"date":"2011-12-07T10:08:38","date_gmt":"2011-12-07T18:08:38","guid":{"rendered":"http:\/\/blog.intego.com\/?p=3579"},"modified":"2026-07-01T13:55:43","modified_gmt":"2026-07-01T20:55:43","slug":"new-variant-of-devilrobber-trojan-found-in-three-mac-apps","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\/","title":{"rendered":"New Variant of DevilRobber Trojan Found in Three Mac Apps"},"content":{"rendered":"<p>Intego&#8217;s malware researchers have found a new variant of the DevilRobber Trojan horse, which they <a href=\"https:\/\/www.intego.com\/mac-security-blog\/new-malware-devilrobber-grabs-files-and-bitcoins-performs-bitcoin-mining-and-more\/\">first discovered in October<\/a>. The latest variant &#8211; DevilRobber.D (there have been two others in between) &#8211; has been spotted in three Mac applications distributed via BitTorrent trackers. The applications in question are Writer&#8217;s Caf\u00e9, EvoCam and Twitterrific. <\/p>\n<p>It is important to note that the original applications, obtained from the developers&#8217; web sites, are not infected, but that malicious users distribute infected versions via BitTorrent trackers. If you use these applications, and have purchased them from the developers, you have nothing to worry about. <\/p>\n<p>In the meantime, VirusBarrier X6 protects against this Trojan horse. Intego updated its malware definitions to recognize this malware, but the existing malware definitions, for previous variants, already blocked it. <\/p>\n<div class=\"blog-download\">\n<h4>Protect your Mac from malware<\/h4>\n<p>Download a free 30-day trial version of VirusBarrier X6 and save $5<\/p>\n<div class=\"clear\"><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Intego&#8217;s malware researchers have found a new variant of the DevilRobber Trojan horse in three Mac apps distributed via BitTorrent trackers.<\/p>\n","protected":false},"author":3,"featured_media":3480,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[190],"tags":[2749,2578,86,132],"class_list":["post-3579","post","type-post","status-publish","format-standard","has-post-thumbnail","category-malware","tag-devilrobber","tag-mac-apps","tag-mac-malware","tag-trojan-horse"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>New Variant of DevilRobber Trojan Found in Three Mac Apps - The Mac Security Blog<\/title>\n<meta name=\"description\" content=\"Intego&#039;s malware researchers have found a new variant of the DevilRobber Trojan horse in three Mac apps distributed via BitTorrent trackers.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.intego.com\/mac-security-blog\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"New Variant of DevilRobber Trojan Found in Three Mac Apps - The Mac Security Blog\" \/>\n<meta property=\"og:description\" content=\"Intego&#039;s malware researchers have found a new variant of the DevilRobber Trojan horse in three Mac apps distributed via BitTorrent trackers.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.intego.com\/mac-security-blog\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\/\" \/>\n<meta property=\"og:site_name\" content=\"The Mac Security Blog\" \/>\n<meta property=\"article:published_time\" content=\"2011-12-07T18:08:38+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-01T20:55:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2011\/11\/Alert.png\" \/>\n\t<meta property=\"og:image:width\" content=\"128\" \/>\n\t<meta property=\"og:image:height\" content=\"128\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Peter James\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Peter James\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\\\/\"},\"author\":{\"name\":\"Peter James\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#\\\/schema\\\/person\\\/d0c16bd0a4dd8f82d91204f400c8d116\"},\"headline\":\"New Variant of DevilRobber Trojan Found in Three Mac Apps\",\"datePublished\":\"2011-12-07T18:08:38+00:00\",\"dateModified\":\"2026-07-01T20:55:43+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\\\/\"},\"wordCount\":158,\"commentCount\":3,\"publisher\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/wp-content\\\/uploads\\\/2011\\\/11\\\/Alert.png\",\"keywords\":[\"DevilRobber\",\"Mac Apps\",\"Malware\",\"Trojan Horse\"],\"articleSection\":[\"Malware\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\\\/\",\"url\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\\\/\",\"name\":\"New Variant of DevilRobber Trojan Found in Three Mac Apps - The Mac Security Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/wp-content\\\/uploads\\\/2011\\\/11\\\/Alert.png\",\"datePublished\":\"2011-12-07T18:08:38+00:00\",\"dateModified\":\"2026-07-01T20:55:43+00:00\",\"description\":\"Intego's malware researchers have found a new variant of the DevilRobber Trojan horse in three Mac apps distributed via BitTorrent trackers.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/wp-content\\\/uploads\\\/2011\\\/11\\\/Alert.png\",\"contentUrl\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/wp-content\\\/uploads\\\/2011\\\/11\\\/Alert.png\",\"width\":\"128\",\"height\":\"128\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"New Variant of DevilRobber Trojan Found in Three Mac Apps\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#website\",\"url\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/\",\"name\":\"The Mac Security Blog\",\"description\":\"Keep Macs safe from the dangers of the Internet\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#organization\",\"name\":\"Intego\",\"url\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/wp-content\\\/uploads\\\/2022\\\/10\\\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png\",\"contentUrl\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/wp-content\\\/uploads\\\/2022\\\/10\\\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png\",\"width\":875,\"height\":875,\"caption\":\"Intego\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/#\\\/schema\\\/person\\\/d0c16bd0a4dd8f82d91204f400c8d116\",\"name\":\"Peter James\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/02040a1b56c0554236733a69e59ffeacde3aff8b1d8fb9818a2b71ebbc0e2484?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/02040a1b56c0554236733a69e59ffeacde3aff8b1d8fb9818a2b71ebbc0e2484?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/02040a1b56c0554236733a69e59ffeacde3aff8b1d8fb9818a2b71ebbc0e2484?s=96&d=mm&r=g\",\"caption\":\"Peter James\"},\"url\":\"https:\\\/\\\/www.intego.com\\\/mac-security-blog\\\/author\\\/peter\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"New Variant of DevilRobber Trojan Found in Three Mac Apps - The Mac Security Blog","description":"Intego's malware researchers have found a new variant of the DevilRobber Trojan horse in three Mac apps distributed via BitTorrent trackers.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.intego.com\/mac-security-blog\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\/","og_locale":"en_US","og_type":"article","og_title":"New Variant of DevilRobber Trojan Found in Three Mac Apps - The Mac Security Blog","og_description":"Intego's malware researchers have found a new variant of the DevilRobber Trojan horse in three Mac apps distributed via BitTorrent trackers.","og_url":"https:\/\/www.intego.com\/mac-security-blog\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\/","og_site_name":"The Mac Security Blog","article_published_time":"2011-12-07T18:08:38+00:00","article_modified_time":"2026-07-01T20:55:43+00:00","og_image":[{"width":128,"height":128,"url":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2011\/11\/Alert.png","type":"image\/png"}],"author":"Peter James","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Peter James","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.intego.com\/mac-security-blog\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\/#article","isPartOf":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\/"},"author":{"name":"Peter James","@id":"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/person\/d0c16bd0a4dd8f82d91204f400c8d116"},"headline":"New Variant of DevilRobber Trojan Found in Three Mac Apps","datePublished":"2011-12-07T18:08:38+00:00","dateModified":"2026-07-01T20:55:43+00:00","mainEntityOfPage":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\/"},"wordCount":158,"commentCount":3,"publisher":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#organization"},"image":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\/#primaryimage"},"thumbnailUrl":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2011\/11\/Alert.png","keywords":["DevilRobber","Mac Apps","Malware","Trojan Horse"],"articleSection":["Malware"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.intego.com\/mac-security-blog\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.intego.com\/mac-security-blog\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\/","url":"https:\/\/www.intego.com\/mac-security-blog\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\/","name":"New Variant of DevilRobber Trojan Found in Three Mac Apps - The Mac Security Blog","isPartOf":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\/#primaryimage"},"image":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\/#primaryimage"},"thumbnailUrl":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2011\/11\/Alert.png","datePublished":"2011-12-07T18:08:38+00:00","dateModified":"2026-07-01T20:55:43+00:00","description":"Intego's malware researchers have found a new variant of the DevilRobber Trojan horse in three Mac apps distributed via BitTorrent trackers.","breadcrumb":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.intego.com\/mac-security-blog\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intego.com\/mac-security-blog\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\/#primaryimage","url":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2011\/11\/Alert.png","contentUrl":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2011\/11\/Alert.png","width":"128","height":"128"},{"@type":"BreadcrumbList","@id":"https:\/\/www.intego.com\/mac-security-blog\/new-variant-of-devilrobber-trojan-found-in-three-mac-apps\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.intego.com\/mac-security-blog\/"},{"@type":"ListItem","position":2,"name":"New Variant of DevilRobber Trojan Found in Three Mac Apps"}]},{"@type":"WebSite","@id":"https:\/\/www.intego.com\/mac-security-blog\/#website","url":"https:\/\/www.intego.com\/mac-security-blog\/","name":"The Mac Security Blog","description":"Keep Macs safe from the dangers of the Internet","publisher":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.intego.com\/mac-security-blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.intego.com\/mac-security-blog\/#organization","name":"Intego","url":"https:\/\/www.intego.com\/mac-security-blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/10\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png","contentUrl":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/10\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png","width":875,"height":875,"caption":"Intego"},"image":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/person\/d0c16bd0a4dd8f82d91204f400c8d116","name":"Peter James","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/02040a1b56c0554236733a69e59ffeacde3aff8b1d8fb9818a2b71ebbc0e2484?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/02040a1b56c0554236733a69e59ffeacde3aff8b1d8fb9818a2b71ebbc0e2484?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/02040a1b56c0554236733a69e59ffeacde3aff8b1d8fb9818a2b71ebbc0e2484?s=96&d=mm&r=g","caption":"Peter James"},"url":"https:\/\/www.intego.com\/mac-security-blog\/author\/peter\/"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts\/3579","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/comments?post=3579"}],"version-history":[{"count":3,"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts\/3579\/revisions"}],"predecessor-version":[{"id":105329,"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts\/3579\/revisions\/105329"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/media\/3480"}],"wp:attachment":[{"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/media?parent=3579"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/categories?post=3579"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/tags?post=3579"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}