Researchers have spotted a new variant of the RSPlug Mac trojan in the wild.