Originally Posted By: Phosphor
Didn't that DNS changer also come wrapped up in some pirated iWorks suites offered on bit torrent servers, et al? I suppose if it was able to be bundled for install with an otherwise legitimate-appearing iWorks, it could be attached to any other installer's script, right?
Legitimate appearing from a torrent? wink All bets are off when it's from there.

Yes, it could be attached but that's what's meant by download from only trusted sites, huh? It is a socially engineered trojan. They don't last long. Word spreads fast and since it's a trojan once the source is shut down it can't propagate anymore.