![]() ![]() The modified copy of Transmission includes a file named General.rtf, which is actually an executable file rather than the rich-text document it pretends to be. The infected app was distributed from the official Transmission website, but with a different code signature than the normal one previously used to sign the Transmission app, implying that the app itself had been modified and re-signed by the attacker (although this has not yet been confirmed). ![]() ![]() It’s in the wild.Īccording to Xiao, the Transmission app – a BitTorrent client – was infected to include this ransomware. It was revealed on Sunday by Claud Xiao of Palo Alto Networks that KeRanger is the first real Mac ransomware, and it’s not just theoretical. Apple quietly added detection of something called “KeRanger” to the XProtect anti-malware definitions in OS X on Saturday. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |