We need your help now
Support from readers like you keeps The Journal open.
You are visiting us because we have something you value. Independent, unbiased news that tells the truth. Advertising revenue goes some way to support our mission, but this year it has not been enough.
If you've seen value in our reporting, please contribute what you can, so we can continue to produce accurate and meaningful journalism. For everyone who needs it.
Sign in. It’s quick, free and it’s up to you.
An account is an optional way to support the work we do. Find out more.
By continuing, you are indicating that you accept our Terms of Service and Privacy Policy.
A SECURITY RESEARCH firm has claimed to have discovered the first example of ransomware that specifically targets Apple Mac computers.
Palo Alto Networks claims to have found the first fully functional example of ransomware targeting OS X.
Called KeRanger, if you install software which contains it, it will end up encrypting your files after three days before demanding you to pay a ransom of one bitcoin (€369.89 at the time of writing) to regain control.
In this case, it was done through a version of the popular BitTorrent program, Transmission. The method used to infect it is unknown but a possible theory from Palo Alto Networks is the official site was compromised and the files were replaced by infected versions.
The creators of Transmission have removed the malware-infected version and later posted an update telling everyone running version 2.90 on OS X to upgrade as they “may have downloaded a malware-infected file”.
It also recommended those running 2.91 to upgrade as a precaution. While that version wasn’t infected, it didn’t remove the malware-infected file.
Those who try to install version 2.90 now and try to run it will be shown a warning dialog telling them that Transmission will damage their computer.
Ransomware is a type of malware which takes over a computer and either locks a user out or threatens to destroy their data until they pay a ransom. Usually, the ransom is paid through a digital currency like Bitcoin as it’s encrypted and cannot be tracked.
Ransomware attacks are usually associated with PCs and smartphones but this is the first time a complete version has been found targeting Apple computers.
To embed this post, copy the code below on your site
Any ransomware I’ve ever seen if it corrupts your files they are gone for good pay or not
It doesn’t corrupt files. It encrypts them. There have been cases where people/companies do pay the ransom and do get their files unencrypted. However it’s a big risk as there is no guarantee and it just encourages these people to keep doing what they are doing
Yes, but easily defeated by taking regular backups. You may loose some data but the majority will be safe and it’s something people should be doing anyway.
Yep that is the best defense.
Backups are only useful if they are made to something that is NOT connected at the time of encryption … otherwise your backup gets encrypted too! :(
Back up your most important data externally.
It is the safest way and the least troublesome way.
Stick with using a good cloud service which gives centralised file distrbution as well as backup.
Dropbox for example will not synchronise with an encrypted file due to lack of rights.
Also, all files can be returned to a previous version if the worst were to happen.
That’s not true David. Once your local hard drive is encrypted, which includes your dropbox files, they wull be uploaded to dropbox.
You will then need to download them all from dropbox or any file sync service from a backup.
Reuben, Try it. Encrypt a file inside a DB folder and watch the process be refused access. It is a constant problem for me when users place encrypted files they have received from external sources into server based DB folders. The DB process will not upload them because of no rights. We then can never get the status ‘Up to Date’.
Poor Mac users – first they’re douchebags, and now this!?
No harm to you Alex, but I hope you update your anti-virus software more often that your insults. Douchebag is so last year.
However, if you are still in your pre-pubescent years and spend your days watching iCarly, then all is forgiven.
Forgot to mention, sent from my iPhone, so I guess I’m a douchebag, which is sooooo Rad!
Bit sad seeing grown adults doing the “My gang is better than your gang” stance over a computer.
VHS will beat Betamax!!
Wtf is iCarly
An iPhone is not a Mac, John. You’re confused.
FRB, no fooling you, eh? I thought the hatred was for anything Apple, not just Macs….only Windows-based stuff is “proper” computery kit.
Way to spot a joke, guys.
I wonder if you can restore your computer to an earlier time or if you’re prevented from doing that as well. I doubt you’d be able to do it the regular way, but booting from a recovery disk you might be able to. I better start backing up my files more often either way
Create a single backup and then do incremental backups when you make changes that you want to keep (or schedule em)
Google Apple Machine – it’s on every Mac for a good few years now. If your disc dies or gets encrypted by malware, you can restore everything.
Which operating system are you looking to recover…??
@Fake Avast: Time Machine works locally, to a USB disc on your LAN, or connected directly to your Mac, so no internet need for daily backups. Restoring the whole system involves downloading the system again from Apple, so you would need good internet for a few hours – if the worst happened, you could bring your Mac and backup disc to a mate’s house to reload…
As long as you’re regularly running time machine backups, then if the worst happens you can boot and restore from a time machine backup. By default though this shouldn’t affect many Mac users as the “security & privacy” settings in “system preferences” are set to allow only apps from the “Mac AppStore” and not “anywhere”. So unless you’ve changed this setting you should be ok. If you have, then ebb on the side of caution and common sense when being prompted to download software from an untrustworthy source.
So in short as long as I don’t install pirate software on my MAC I’m still OK!
I think it’s all starting to go pear shaped for Apple. A brutal start to the new year.
have your say