Trojan Yontoo leads among new adware

http://st.drweb.com/static/new-www/news/2013/march/Yontoo1.1.png 
Russian anti-virus company Doctor net reports that adware for mackintosh OS X has been increasing in range since the start of 2013. Trojan.Yontoo.1 is that the most outstanding of them: It will transfer associate degreed install associate degree adware browser plugin in an infected system.
According to Doctor Web's analysts, the trend towards a growing range of adware for numerous platforms has persisted from early 2013. Criminals exploit affiliate ad network programs, and their interest in users of Apple-compatible computers grows day by day. Recently discovered , Trojan .Yontoo.1 will function a placing example of such computer code.
There ar many ways that for the Trojan to induce onto a laptop. To unfold the Trojan, criminals crafted promo pages that prompt users to put in a browser plugin. In fact, the prompt solely imitates a typical dialogue displayed once a plugin must be put in or further configuration is important. once clicking on ‘Install the plug-in’, the user is redirected to a different website from that Trojan.Yontoo.1 is downloaded.
screen
Criminals have additionally provided for variety of other ways that to unfold this threat. The Trojan may also be downloaded as a media player, a video quality sweetening program or a transfer accelerator.
When launched, Trojan.Yontoo.1 displays a dialogue window that asks the user if they require to put in Free Twit Tube.




screen
However, once the user presses ‘Continue’, rather than the secure program, the Trojan downloads (from the Internet) and installs the plugin Yontoo for expedition, Chrome and Firefox. These browsers ar preferred among mackintosh OS X users. whereas a user surfs the net, the plugin transmits info regarding the loaded pages to a far off server.
screen
In return, it gets a file that allows the Trojan to plant third-party code into pages visited by the user. this is often however associate degree apple.com page is displayed on associate degree infected machine.
screen
Such browser extensions ar detected by Dr.Web as Adware.Plugin. It ought to be noted that the same theme for spreading the Trojan is employed to focus on Windows PCs.