Ransomware Hits Apple Mac Computers

TASA ID: 4285

Being reported by Reuters as the first functional ransomware virus for Apple’s Mac computers, the “KeRanger” malware has been identified to be infecting users’ computers. The malware which is said to have been embedded in a program known as Transmission which is used for transferring files through Bit Torrent, a peer-to-peer file sharing system.

Users that downloaded version 2.90 of Transmission are at risk of the infection which begins encrypting files after a three-day delay. Once encrypted, KeRanger requires a payment of one bitcoin in order for the encryption to be released.

Transmission has already released a replacement version of the software (version 2.91) for users that may have been infected.

Traditionally, users think ransomware and other malware are relegated to Windows-based computers, but the overwhelming adoption of other devices (Apple Macs, iOS mobile devices, Android, etc.) has increased the payoff for cyber criminals to spend effort attempting to infect these systems. 

Ransomware is a form of malware which is typically delivered through email phishing campaigns. Phishing emails are sent by cyber criminals in an effort to get unsuspecting users to click a link or attachment within the email in order to activate the malware. Once activated, the code uses military-grade encryption to encrypt the user’s files to block access. The user is typically presented with a message telling them that in order to regain access to their files they will need to pay a “ransom” in Bitcoin to the perpetrators.

The ransom is usually a small amount in the order of one or two Bitcoins, which, at the time of this writing, was $419.07 dollars per Bitcoin. Recently; however, a Los Angeles area hospital was forced to pay a ransom of approximately $17,000, or 40 Bitcoins to release the encryption from their system. Bitcoins are requested because the online currency is difficult to trace.

This article discusses issues of general interest and does not give any specific legal or business advice pertaining to any specific circumstances.  Before acting upon any of its information, you should obtain appropriate advice from a lawyer or other qualified professional.

This article may not be duplicated, altered, distributed, saved, incorporated into another document or website, or otherwise modified without the permission of TASA.