[Michael]

As I was just finished with the fake Brazzers site, my investigation took me to another very interesting path.

The following IP:*61.235.117.88 from China, hosts malware:



The domain*celebnudestars.net pushes PC and Mac Trojans:



The Mac sample is yet again totally undetected:



The PC sample will change your Desktop wallpaper to this:



and install a rogue, System Security:



Stay clear off those sites!

Jerome Segura

[stevejoblard]

... but not by the Windows specialized AV on virustotal!

VirusBarrier from Intego already detects it with the name OSX/RSPlug.K

This troyan may be downloaded on basic game sites too: Blog Intego