Malware dubbed Backdoor.MAC.Eleanor arrives at a Mac users doorstep as a drag-and-drop converter application called EasyDoc Converter.app. Instead it executes a script that installs three components onto an infected Mac system. Each infected machine is given a unique Tor address and a Pastebin agent. The malware also has the ability to capture images and videos from the users webcams using a tool found in ~/Library/.dropbox/utilities/wacaw (http://webcam-tools.sourceforge.net)”]
Source: https://grahamcluley.com/mac-malware-uses-tor-obtain-access-systems/