Transmission infected with KeRanger (fully functional ransomware)!

Feek · 6 Mar 2016 at 21:35

http://researchcenter.paloaltonetwo...ted-transmission-bittorrent-client-installer/

Attackers infected two installers of Transmission version 2.90 with KeRanger on the morning of March 4.

Users who have directly downloaded Transmission installer from official website after 11:00am PST, March 4, 2016 and before 7:00pm PST, March 5, 2016, may be been infected by KeRanger.

Transmission automatically updated for me on the 28th February and so the version I had was clean but I wonder how many people this has affected.

/edit - It seems that it only affected people who downloaded directly from the website, not those that updated from within the app itself.

This is nasty, very nasty.

Deleted member 77746 · 7 Mar 2016 at 00:27

Yeh I read about this earlier. Glad I don't use torrents now.

Jamesyboyjim · 7 Mar 2016 at 15:00

ouch!!! Unbreakable ransomware is a worst nightmare scenario!

V F · 7 Mar 2016 at 16:38

mrbell1984 said:
Yeh I read about this earlier. Glad I don't use torrents now.

What is worse, app updates can be hijacked...

Rroff · 7 Mar 2016 at 16:42

Jamesyboyjim said:
ouch!!! Unbreakable ransomware is a worst nightmare scenario!

This is why I alternate between 2 offline backups for anything critical.

Deleted member 77746 · 7 Mar 2016 at 17:26

V F said:
What is worse, app updates can be hijacked...

Yep and what's even worse is Apple signed the damn app update! :mad:

KIA · 7 Mar 2016 at 17:46

Feek · 7 Mar 2016 at 18:14

Well no, app updates can't be hijacked. If you read further into it, the only way to get this was on a fresh download directly from the website. If you used the in app updater, it was clean.

ic1male · 11 Mar 2016 at 16:23

Would something like NOD antivirus pick up this?

KIA · 12 Mar 2016 at 13:15

ic1male said:
Would something like NOD antivirus pick up this?

No guarantee. AV isn't reliable.

V F · 13 Mar 2016 at 03:46

Intego picked it up.

https://www.intego.com/mac-security...ttack-spread-via-transmission-bittorrent-app/

munge · 23 Mar 2016 at 08:54

Out of interest, would Transmission's developers be liable for the cost of unlocking if you were infected?