Apple has shut down the first fully-functional Mac OS X ransomware

Re:Apple has shut down the first fully-functional Mac OS X r... by v64 on Tuesday March 08, 2016 @03:12PM (#11248187)

Do you have a citation for this? The extent of what was illicitly accessed remains unclear. Without knowing how their infrastructure is set up, it's not possible to say that the intrusion was limited to just the web server.

[ Parent | on HN ]

Re:Apple has shut down the first fully-functional Mac OS X r... by cshenoy on Tuesday March 08, 2016 @03:32PM (#11248357)

Here's the Reuters article where they state that:

http://www.reuters.com/article/apple-ransomware-idINL1N16F17...

[ Parent | on HN ]

Re:Apple has shut down the first fully-functional Mac OS X r... by v64 on Tuesday March 08, 2016 @04:01PM (#11248587)

Thanks for that, at least it's something. John Clay is listed here[1] as a contributor to "Website maintenance and troubleshooting, Mac OS X help documentation". I wish they would post a similar update on their website and explicitly confirm that the current source and binaries have been audited and are safe.

[1] https://github.com/jparyani/Transmission/blob/master/AUTHORS

[ Parent | on HN ]

Re:Apple has shut down the first fully-functional Mac OS X r... by redthrowaway on Tuesday March 08, 2016 @04:21PM (#11248762)

They've probably addressed it officially by now, but the malware was only included in v2.9.0 downloaded from the web page directly. It wasn't included if the update was performed through the Transmission client. That would seem to suggest it was the web server that was compromised.

[ Parent | on HN ]