Phony Bitcoin ticker apps hosted on popular sites Download.com and MacUpdate.com are fronts for the OSX/CoinThief Trojan. The Trojan was built to steal Bitcoin wallet credentials and keys, and to date has drained a small number of accounts. New variants of the Trojan targeting Mac OS X users were found on the sites and also include a browser extension for Firefox. Previous versions of CoinThief spread through a GitHub page that has since been taken down and included extensions for Safari and Chrome only.
Source: https://threatpost.com/cointhief-bitcoin-trojan-found-on-popular-download-sites/104234/