Mac ransomware author is giving away malicious code to script kiddies

“Security researchers have discovered a ransomware variant that targets Macs rather than Windows PCs,” John Leyden reports for The Register.

“Although technically inferior to most current ransomware targeting Windows, it still encrypts or prevents access to victim’s files, thereby causing real damage, according to researchers at Fortinet,” Leyden reports. “The malware is being offered through a ransomware-as-a-service delivery model so even the relatively clueless can try making money with the nasty. No coding experience is needed. Would-be crooks can contact the author and obtain malicious code through a portal on the dark net, Fortinet discovered.”

Leyden reports, “The role of the script kiddie is restricted to distributing the nasty using booby-trapped emails or direct installation.”

Read more in the full article here.

MacDailyNews Take: Ransomware franchising.

The role of the script kiddie is also to get caught instead of the ringleader.

Do not download/install software from untrusted sites.

SEE ALSO:
New macOS ransomware written in Apple’s Swift spotted in the wild – February 22, 2017

22 Comments

    1. Mac do not install software unless you tell it to do so.
      Once “you” instruct a Mac to run a “malware program” it is no longer “malware”, it then becomes a program you “want” to run.

      With PC’s this is not the case. PC’s run malware even if you didn’t tell it to run it. When a computer runs software you didn’t tell it to run then it is running “malware”.

      Got it? Sigh, probably not.

      1. So, Macs are susceptible.
        Or, is it Mac users are suceptible?
        How do you tell the difference,
        A simple inadvertent click and its shit city. Gosh, that sounds so horribly wrong and preventable!

        1. You are free to move on to the Dark Side if you think your interests & security are better served there. Technology can be precarious and the bad guys are always looking for a way in hence constant due diligence is required to keep them out. But such Tech 101 basic knowledge is apparently beyond you. Would that all things be as simplistic as you make them.

      2. Not completely true.

        There are ways to install software without user’s consent, on Mac OS. However extremely unlikely and Apple is all over that as the absolute number one priority. They drop everything to stop that. However, Apple does install software updates without your approval, such as to stop others from installing software without your approval.

        1. Oh, bloody pecker, ya’ think? Hasn’t happened yet. But what about those thousands of illiterate fanboys and nit-witted Mac users unconsciously clicking without thinking? What about all of them? And then they’re sharing files, too, with their daft friends, spreading the misery. When I think about that I think about you and your cronies.

    2. Where the heck did you ever, see, read, or hear that?? Apple has never said it was ever immune, it did say it is far less likely because of its protocol used to allow software installation. (I.E.) Admin Authentication with its own built in program “The Gatekerper” to aide the user in making smart choices with software installation. The OS is also built smarter than MS and the instant responses from Apple with security patches are superior to MS. This is the tip of the iceberg.

      1. Finally! People agree that Mac OS is totally and completely susceptible; and Apple has no defense against it. Apple shouldn’t sell any devices to people who are incapable of using them properly.

        1. I think Apple needs to rescind your Apple Fanboy membership, tear up your Apple Fanboy card, take that Apple Fanboy cap off your head, and confiscate your Mac. You’re probably “Mac User Zero” who started all this malware spreading from Mac to Mac. Are you proud of yourself?

      2. Agreed. It was more the salespeople that promoted the spin that “Macs don’t get viruses”. Even if Apple hasn’t come out and said “Macs are immune” the public sentiment over the years is that it is immune and any fallout is not Apple’s fault unless you want to blame them for unfounded expectations.

    1. The reality is that Macs have not had a true virus in the wild since MacOS 9.0. A few years back a Windows variant was still in developer only beta and had less than 10,000 user hours on it and it already have a virus targeting it in the wild.

      No matter what anyone tries to tell you, Windows is more vulnerable. Why? Partly because it is still to some extent based on 20+ year old code. That legacy stuff is still there because it works, not because it is bullet proof to attack. And, Windows needs to run on a few thousand variants of machines. Apple’s macOS only needs to run on a few dozen variants. This allows macOS to be inherently tighter.

      There have been several trojans targeting macOS (and other variants since System 7) out in the wild. The problem with a trojan is the user, not the machine. No matter how hard *any* OS or application provider (even Apple) tries, a company cannot fix stupid. If a user downloads software then tells the OS to install it, there is very, very little the OS can do to stop the user from installing it.

  1. You are absolutely right about that. Apple has a definite advantage. Between a much more limited selection of hardware running the OS AND, people generally on the most recent version. It’s really funny apple forces people to stay up to date and mac users have no problem. Microsoft tries to do the same and windows users scream bloody murder. Point is case the fact that windows XP still has almost 13 percent market share.

Reader Feedback

This site uses Akismet to reduce spam. Learn how your comment data is processed.