In a nutshell, the malicious code is embedded in a Mac utility called EasyDoc Converter.app. Given that the app itself does not do what it says it will do (convert files from one format to another), this was a pretty obvious find.

But think of this example as a proof of concept. This malware could just as easily be embedded in a useful tool. If you are going to go outside the Mac App Store, be sure you are downloading a known, vetted product from a known, vetted source.

[Via 9to5Mac]