At Sunday, researchers at Palo Alto Networks Inc. have found that Apple clients that are using the Transmission BitTorrent Client on their Macintosh PCs have been focused by an intense sort of malware known as ‘ransomware’.
For those of you who don’t know, ransomware is a bit of software that encrypts files on the infected devices with a strong algorithm, and requests the users cash in return for the decryption key, which is in no way, shape or form a guarantee that you’ll recover your data.
There have been a significant number ransomware campaigns focusing on Windows PCs before, but researchers at the firm believe that the “KeRanger” ransomware is “the first completely functional ransomware seen on the OS X platform”.
According to the organization, “KeRanger ” stays inactive for three days, after which it begins encrypting certain sorts of files, and backup data, requesting one bitcoin (or about $400) to a specific address so as to recover their files.
On March 4, the attackers had integrated the ransomware in the installers of the Transmission Bittorrent client version 2.90 by compromising the official site, and marked the files with a valid Mac application developer certificate, that has recently been revoked by Apple.
If you’ve installed Transmission 2.90, you should be welcomed by a message like the one above, and it is essential that you download version 2.92. For those of you who want to jump into the technical details, you can discover them at this link, alongside a step-by-step guide on how to protect yourself in case you downloaded the rogue application.