What does this file mascarade as to get users to give permission to install? Is it primarily just for idiots who let every little randomly downloaded to their machines without their initiating the download, and despite warnings that it was downloaded from the internet, and not from a trusted site?
From what I understand it comes as a link in an email with the text that it is a YouTube of a vide the sender thinks includes YOU in the video... just click on here and instead of a YouTube you get a YouTube look alike site and then it wants to download an app to allow you to view the video. If you accept the aplet, you are then asked to allow the install of the application... which is the Trojan. It takes industrial strength stupid to ignore the warnings OSX puts up about the site being an untrusted site and that the security certificate is not valid... and then installing from the web... etc. But some users are industrial strength stupid and just HAVE to see that video. Some people just have to go see the varmint...