Apple has shut down the first fully-functional Mac OS X ransomware

Re:Apple has shut down the first fully-functional Mac OS X r... by zymhan on Tuesday March 08, 2016 @03:27PM (#11248322)

So this confirms that Apple revoking the app-signing certificate that pissed off a bunch of people was related to KeRanger?

[ Parent | on HN ]

Re:Apple has shut down the first fully-functional Mac OS X r... by kogir on Tuesday March 08, 2016 @04:21PM (#11248756)

No. They revoked that single developer's certificate. I think you're referring to an Apple certificate that simply expired and invalidated many App Store signatures.

[ Parent | on HN ]

Re:Apple has shut down the first fully-functional Mac OS X r... by kolinko on Tuesday March 08, 2016 @05:30PM (#11249324)

They revoked the developer's certificate, or they blocked opening up of an image with a given checksum?

[ Parent | on HN ]

Re:Apple has shut down the first fully-functional Mac OS X r... by duskwuff on Tuesday March 08, 2016 @07:27PM (#11249939)

Both.

Apple has updated XProtect to detect the malicious Transmission disk image and prevent it from being opened, and has additionally revoked the developer certificate which was used to sign the application on that disk image to prevent any other applications they sign from being treated as trusted.

[ Parent | on HN ]