Results 1 to 15 of 15

Thread: Apple Mac users targeted by Ransomware for first time

  1. #1
    HEXUS.admin
    Join Date
    Apr 2005
    Posts
    31,709
    Thanks
    0
    Thanked
    2,073 times in 719 posts

    Apple Mac users targeted by Ransomware for first time

    This fully functioning in-the-wild Apple Mac malware is known as 'KeRanger'.
    Read more.

  2. #2
    Anthropomorphic Personification shaithis's Avatar
    Join Date
    Apr 2004
    Location
    The Last Aerie
    Posts
    10,857
    Thanks
    645
    Thanked
    872 times in 736 posts
    • shaithis's system
      • Motherboard:
      • Asus P8Z77 WS
      • CPU:
      • i7 3770k @ 4.5GHz
      • Memory:
      • 32GB HyperX 1866
      • Storage:
      • Lots!
      • Graphics card(s):
      • Sapphire Fury X
      • PSU:
      • Corsair HX850
      • Case:
      • Corsair 600T (White)
      • Operating System:
      • Windows 10 x64
      • Monitor(s):
      • 2 x Dell 3007
      • Internet:
      • Zen 80Mb Fibre

    Re: Apple Mac users targeted by Ransomware for first time

    .........but you don't get viruses on Macs!!!
    Main PC: Asus Rampage IV Extreme / 3960X@4.5GHz / Antec H1200 Pro / 32GB DDR3-1866 Quad Channel / Sapphire Fury X / Areca 1680 / 850W EVGA SuperNOVA Gold 2 / Corsair 600T / 2x Dell 3007 / 4 x 250GB SSD + 2 x 80GB SSD / 4 x 1TB HDD (RAID 10) / Windows 10 Pro, Yosemite & Ubuntu
    HTPC: AsRock Z77 Pro 4 / 3770K@4.2GHz / 24GB / GTX 1080 / SST-LC20 / Antec TP-550 / Hisense 65k5510 4K TV / HTC Vive / 2 x 240GB SSD + 12TB HDD Space / Race Seat / Logitech G29 / Win 10 Pro
    HTPC2: Asus AM1I-A / 5150 / 4GB / Corsair Force 3 240GB / Silverstone SST-ML05B + ST30SF / Samsung UE60H6200 TV / Windows 10 Pro
    Spare/Loaner: Gigabyte EX58-UD5 / i950 / 12GB / HD7870 / Corsair 300R / Silverpower 700W modular
    NAS 1: HP N40L / 12GB ECC RAM / 2 x 3TB Arrays || NAS 2: Dell PowerEdge T110 II / 24GB ECC RAM / 2 x 3TB Hybrid arrays || Network:Buffalo WZR-1166DHP w/DD-WRT + HP ProCurve 1800-24G
    Laptop: Dell Precision 5510 Printer: HP CP1515n || Phone: Huawei P30 || Other: Samsung Galaxy Tab 4 Pro 10.1 CM14 / Playstation 4 + G29 + 2TB Hybrid drive

  3. #3
    mush-mushroom b0redom's Avatar
    Join Date
    Oct 2005
    Location
    Middlesex
    Posts
    3,494
    Thanks
    195
    Thanked
    383 times in 292 posts
    • b0redom's system
      • Motherboard:
      • Some iMac thingy
      • CPU:
      • 3.4Ghz Quad Core i7
      • Memory:
      • 24GB
      • Storage:
      • 3TB Fusion Drive
      • Graphics card(s):
      • nViidia GTX 680MX
      • PSU:
      • Some iMac thingy
      • Case:
      • Late 2012 pointlessly thin iMac enclosure
      • Operating System:
      • OSX 10.8 / Win 7 Pro
      • Monitor(s):
      • Dell 2713H
      • Internet:
      • Be+

    Re: Apple Mac users targeted by Ransomware for first time

    ....this is malware not a virus......

  4. #4
    Registered+
    Join Date
    Dec 2015
    Posts
    16
    Thanks
    0
    Thanked
    0 times in 0 posts

    Re: Apple Mac users targeted by Ransomware for first time

    This is the second IT magazine where I've read about this. I'm pretty sure the one in 2014 also hit OSX, though it sure hit iOS hardest.

  5. #5
    The late but legendary peterb - Onward and Upward peterb's Avatar
    Join Date
    Aug 2005
    Location
    Looking down & checking on swearing
    Posts
    19,378
    Thanks
    2,892
    Thanked
    3,403 times in 2,693 posts

    Re: Apple Mac users targeted by Ransomware for first time

    Quote Originally Posted by shaithis View Post
    .........but you don't get viruses on Macs!!!
    As boredom said.

    But I don't know why you should think that. MaCos is based on UNIX, and the first viruses written were for UNIX systems. Macs have been relatively free from virus attacks because they weren't perceived as mainstream, but clearly that is changing.

    Apples "walled garden' has provided some protection, but the application was compromised at source, but full marks to Apple and the developers for identifying and mitigating agains it.

    However, of greater interest is the implication from the HEXUS article that the encryption is done online, rather than by the malware itself, which appears to act as a conduit, so that should be traceable.
    (\__/)
    (='.'=)
    (")_(")

    Been helped or just 'Like' a post? Use the Thanks button!
    My broadband speed - 750 Meganibbles/minute

  6. #6
    Senior Member
    Join Date
    Jul 2013
    Location
    Dorset
    Posts
    477
    Thanks
    4
    Thanked
    22 times in 19 posts
    • LeetyMcLeet's system
      • Motherboard:
      • Gigabyte Auros X570 Master 1.2
      • CPU:
      • AMD Ryzen 9 5900X
      • Memory:
      • 64 GB 3600 DDR3 (G.Skill Trident Z)
      • Storage:
      • 250GB Samsung 980 Pro PCIe NVMe, 2 x 2TB Samsung 870 EVO SATA3, 2 x 6TB WD Black 3.5'' HDDs
      • Graphics card(s):
      • Nvidia RTX 3070Ti (MSI SUPRIM)
      • PSU:
      • Fractal Design ION Gold 750W
      • Case:
      • Fractal Design 7 Dark with TG Window
      • Operating System:
      • Windows 10 Pro x64
      • Monitor(s):
      • BenQ/Zowie XL @ 1080p, 240Hz
      • Internet:
      • BT Business FTTC/VDSL ~ 50Mbps

    Re: Apple Mac users targeted by Ransomware for first time

    It was only a matter of time.

    We've seen an increase in malware-infected Macs over the last couple of years. Funny thing is, most of the customers bought macs because of the security advantage lol (or even funnier, because they're 'faster' -- my personal favourite)

  7. #7
    Anthropomorphic Personification shaithis's Avatar
    Join Date
    Apr 2004
    Location
    The Last Aerie
    Posts
    10,857
    Thanks
    645
    Thanked
    872 times in 736 posts
    • shaithis's system
      • Motherboard:
      • Asus P8Z77 WS
      • CPU:
      • i7 3770k @ 4.5GHz
      • Memory:
      • 32GB HyperX 1866
      • Storage:
      • Lots!
      • Graphics card(s):
      • Sapphire Fury X
      • PSU:
      • Corsair HX850
      • Case:
      • Corsair 600T (White)
      • Operating System:
      • Windows 10 x64
      • Monitor(s):
      • 2 x Dell 3007
      • Internet:
      • Zen 80Mb Fibre

    Re: Apple Mac users targeted by Ransomware for first time

    Quote Originally Posted by peterb View Post
    As boredom said.

    But I don't know why you should think that.
    Virus and malware are synonymous with each other these days and totally interchangeable.

    And I don't think Macs are immune, that's just what I keep hearing from Mac owners!
    Main PC: Asus Rampage IV Extreme / 3960X@4.5GHz / Antec H1200 Pro / 32GB DDR3-1866 Quad Channel / Sapphire Fury X / Areca 1680 / 850W EVGA SuperNOVA Gold 2 / Corsair 600T / 2x Dell 3007 / 4 x 250GB SSD + 2 x 80GB SSD / 4 x 1TB HDD (RAID 10) / Windows 10 Pro, Yosemite & Ubuntu
    HTPC: AsRock Z77 Pro 4 / 3770K@4.2GHz / 24GB / GTX 1080 / SST-LC20 / Antec TP-550 / Hisense 65k5510 4K TV / HTC Vive / 2 x 240GB SSD + 12TB HDD Space / Race Seat / Logitech G29 / Win 10 Pro
    HTPC2: Asus AM1I-A / 5150 / 4GB / Corsair Force 3 240GB / Silverstone SST-ML05B + ST30SF / Samsung UE60H6200 TV / Windows 10 Pro
    Spare/Loaner: Gigabyte EX58-UD5 / i950 / 12GB / HD7870 / Corsair 300R / Silverpower 700W modular
    NAS 1: HP N40L / 12GB ECC RAM / 2 x 3TB Arrays || NAS 2: Dell PowerEdge T110 II / 24GB ECC RAM / 2 x 3TB Hybrid arrays || Network:Buffalo WZR-1166DHP w/DD-WRT + HP ProCurve 1800-24G
    Laptop: Dell Precision 5510 Printer: HP CP1515n || Phone: Huawei P30 || Other: Samsung Galaxy Tab 4 Pro 10.1 CM14 / Playstation 4 + G29 + 2TB Hybrid drive

  8. #8
    jim
    jim is offline
    HEXUS.clueless jim's Avatar
    Join Date
    Sep 2008
    Location
    Location: Location:
    Posts
    11,457
    Thanks
    613
    Thanked
    1,645 times in 1,307 posts
    • jim's system
      • Motherboard:
      • Asus Maximus IV Gene-Z
      • CPU:
      • i5 2500K @ 4.5GHz
      • Memory:
      • 8GB Corsair Vengeance LP
      • Storage:
      • 1TB Sandisk SSD
      • Graphics card(s):
      • ASUS GTX 970
      • PSU:
      • Corsair AX650
      • Case:
      • Silverstone Fortress FT03
      • Operating System:
      • 8.1 Pro
      • Monitor(s):
      • Dell S2716DG
      • Internet:
      • 10 Mbps ADSL

    Re: Apple Mac users targeted by Ransomware for first time

    It does amuse me how often it gets trotted out. I think much of the time, it's a convenient rationale as to why they've spent more than they planned to on their new laptop.

    It's never critical, but it's a feeling that helps soothe them.

  9. #9
    Senior Member
    Join Date
    Sep 2012
    Posts
    268
    Thanks
    1
    Thanked
    14 times in 12 posts

    Re: Apple Mac users targeted by Ransomware for first time

    It's simple, if your going to make a virus or malware you target the largest host. That's PC's.
    Mac is no more secure from them than any other system.

  10. #10
    The late but legendary peterb - Onward and Upward peterb's Avatar
    Join Date
    Aug 2005
    Location
    Looking down & checking on swearing
    Posts
    19,378
    Thanks
    2,892
    Thanked
    3,403 times in 2,693 posts

    Re: Apple Mac users targeted by Ransomware for first time

    Quote Originally Posted by shaithis View Post
    Virus and malware are synonymous with each other these days and totally interchangeable.

    And I don't think Macs are immune, that's just what I keep hearing from Mac owners!
    Malware is the generic term, a virus is a type of malware that is self replicating and or self transmitting. This instantiation of malware is more like a Trojan.

    And you shouldn't believe everything a Mac owner tells you!

    Quote Originally Posted by Plasmastorm View Post
    It's simple, if your going to make a virus or malware you target the largest host. That's PC's.
    Mac is no more secure from them than any other system.
    A Mac is a PC PC stands for Personal Computer.
    (\__/)
    (='.'=)
    (")_(")

    Been helped or just 'Like' a post? Use the Thanks button!
    My broadband speed - 750 Meganibbles/minute

  11. #11
    Senior Member
    Join Date
    Sep 2012
    Posts
    268
    Thanks
    1
    Thanked
    14 times in 12 posts

    Re: Apple Mac users targeted by Ransomware for first time

    Mac is only a pc if you didn't live through the old Apple advertising stating that it is not a pc, it's a mac

  12. #12
    Senior Member
    Join Date
    Jun 2013
    Posts
    344
    Thanks
    54
    Thanked
    22 times in 19 posts

    Re: Apple Mac users targeted by Ransomware for first time

    Quote Originally Posted by LeetyMcLeet View Post
    Funny thing is, most of the customers bought macs because of the security advantage lol (or even funnier, because they're 'faster' -- my personal favourite)
    And they're still not wrong; they do have a security advantage, and a significant one. It would take a lot more situations like this to remove that advantage.

    Quote Originally Posted by Plasmastorm View Post
    It's simple, if your going to make a virus or malware you target the largest host. That's PC's.
    Mac is no more secure from them than any other system.
    It's got big advantages beyond lack of targeting. Apple has much more control of its OS than does any PC OS publisher. I wouldn't swap my PC for a Mac and will happily continue to take my chances, but Apple owners can continue being smug about relative security with a good few justifications.

  13. #13
    Senior Member
    Join Date
    Aug 2008
    Posts
    558
    Thanks
    1
    Thanked
    26 times in 21 posts

    Re: Apple Mac users targeted by Ransomware for first time

    As the userbase (of Macs) grows then they are more likely to be targetted.
    The Mac userbase is still relatively small compared to Windows and the userbase tends to be larger in more affluent Western countries whereas cheapo Windows boxes are still popular in Asia, India, Africa, China and the old Eastern Bloc countries. If the Mac userbase was to grow significantly in the latter regions its likely that malware/viruses and scams would also grow.
    If i were a writer of malware/viruses or trying a scam then i would target Apple products as users tend to be smug about the dangers thinking they are non existant and not possible and the majority of the Apple userbase (particularly non tech) are complete plebs when it comes to how the devices work.

  14. #14
    mush-mushroom b0redom's Avatar
    Join Date
    Oct 2005
    Location
    Middlesex
    Posts
    3,494
    Thanks
    195
    Thanked
    383 times in 292 posts
    • b0redom's system
      • Motherboard:
      • Some iMac thingy
      • CPU:
      • 3.4Ghz Quad Core i7
      • Memory:
      • 24GB
      • Storage:
      • 3TB Fusion Drive
      • Graphics card(s):
      • nViidia GTX 680MX
      • PSU:
      • Some iMac thingy
      • Case:
      • Late 2012 pointlessly thin iMac enclosure
      • Operating System:
      • OSX 10.8 / Win 7 Pro
      • Monitor(s):
      • Dell 2713H
      • Internet:
      • Be+

    Re: Apple Mac users targeted by Ransomware for first time

    You seriously think the average PC user is more knowledgable than the average Mac user? I suspect you are mistaken. I'm not trying to suggest that the average Mac user knows more, just that most PCs are in use in offices or bought from PC World etc.

  15. #15
    The late but legendary peterb - Onward and Upward peterb's Avatar
    Join Date
    Aug 2005
    Location
    Looking down & checking on swearing
    Posts
    19,378
    Thanks
    2,892
    Thanked
    3,403 times in 2,693 posts

    Re: Apple Mac users targeted by Ransomware for first time

    Quote Originally Posted by Otherhand View Post
    And they're still not wrong; they do have a security advantage, and a significant one. It would take a lot more situations like this to remove that advantage.



    It's got big advantages beyond lack of targeting. Apple has much more control of its OS than does any PC OS publisher. I wouldn't swap my PC for a Mac and will happily continue to take my chances, but Apple owners can continue being smug about relative security with a good few justifications.
    Security through obscurity is not a good model to hide behind. OSX is still vulnerable through its UNIX heritage, as the Shellshock bug demonstrated.
    (\__/)
    (='.'=)
    (")_(")

    Been helped or just 'Like' a post? Use the Thanks button!
    My broadband speed - 750 Meganibbles/minute

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •