Scary ‘malware-as-a-service’ Mac attack discovered