About recent OSX Trojan
Good reference and reading for recent OSX trojans:
CA Blog: New Trojans Strike OS X
ArborNetworks: New OS X Malcode: Not Just a DNSChanger
There’s a slight changes on DMG (as graphically shown below), depending on the Remote IP address it’s trying to access.