Slashdot Mirror
Apple Mac Computers Are Being Targeted By Ransomware, Spyware (bbc.com)
If you are a Mac user, you should be aware of new variants of malware that have been created specifically to target Apple computers; one is ransomware and the other is spyware. "The two programs were uncovered by the security firms Fortinet and AlienVault, which found a portal on the Tor 'dark web' network that acted as a shopfront for both," reports BBC. "In a blog post, Fortinet said the site claimed that the creators behind it were professional software engineers with 'extensive experience' of creating working code." From the report: Those wishing to use either of the programs had been urged to get in touch and provide details of how they wanted the malware to be set up. The malware's creators had said that payments made by ransomware victims would be split between themselves and their customers. Researchers at Fortinet contacted the ransomware writers pretending they were interested in using the product and, soon afterwards, were sent a sample of the malware. Analysis revealed that it used much less sophisticated encryption than the many variants seen targeting Windows machines, said the firm. However, they added, any files scrambled with the ransomware would be completely lost because it did a very poor job of handling the decryption keys needed to restore data. The free Macspy spyware, offered via the same site, can log which keys are pressed, take screenshots and tap into a machine's microphone. In its analysis, AlienVault researcher Peter Ewane said the malicious code in the spyware tried hard to evade many of the standard ways security programs spot and stop such programs.
Macs don't get viruses? They don't. Any system including Linux can get malware if you download from untrusted sources on pirate bay or click on "update adobe flash" from a porn site ad... Good thing about Macs is people tend to actually back them up with time machine, so it should be a quick recovery.
Does not talk about attack vector, what user action is needed to get infected with the malware.
sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
This is news. That tells you it's shockingly unusual. That is to say if the word apple were not there it would not be news.
Some drink at the fountain of knowledge. Others just gargle.
Funnily enough, I got an email just the other day with Linux ransomware, so I don't want to hear any of this "Linux has no ransomware" nonense. Here's the mail:
Dear Sir or Madam,
Our esteemed company would like to submit a large purchase order for $100.0000,00, as I am sure you will find agreeable to your company. To complete this order please follow these instructions:
1. sudo apt-get install build-essential ..
2. enter your root password.
3. Save the following attachment to a file called "purchaseorder.cpp"
4. Open a shell window.
5. cd to the location of the file you saved. Make sure it's the same directory!
6. mkdir build
7. cd build
8. cmake -D CMAKE_BUILD_TYPE=Release
9. make -j4
10. sudo make install
11. sudo apt-get install libcrypto++9 libcrypto++9v5 libcryptsetup4
12. sudo purchaseorder
Note if /usr/local/bin/ is not in your search path, you may have to provide a path yourself. If that doesn't work please try "git pull --rebase origin/purchaseorder-root-branch" and try again.
Thank you!
Fuckers! I did all that and now those assholes are demanding a ransom to get my files back.
I remember getting epolife on my mac somehow (it could have been me, but I suspect it was my mom). Three google searches, a couple of hidden directories, and a few browser settings, and it was gone.
Much easier than some virus experiences I had with my PC backintheday.
"Who are you?" "No one of consequence." "I must know." "Get used to disappointment."
As a technician I thank skygods for Microsoft security, it's putting my kids through college.
I am professional software engineer with 'extensive experience' of creating working code."
Browser/plugin exploits and malicious ads
"When life gives you lemons, don't make lemonade. Make life take the lemons back!" -- Cave Johnson
They can place the virus in the subtitle track of the movie.
mac users have already shown a willingness to throw money away. disguise and style your malware and ransomware like an apple app or advertisement and you'll be minting money.
What? You think I have any money left after pre-ordering that new iMac Pro?!
Get good AV like Intego. https://www.intego.com/
A firewall product like https://www.obdev.at/products/...
RansomWhere? https://objective-see.com/
Malwarebytes https://www.malwarebytes.com/m...
Domestic spying is now "Benign Information Gathering"
to make it's way into your Mac in every possible way since your first powered up your Mac. That is where Apple should have already taken action.
It's NeXTStep, an ancient broken derivative of BSD but with a different kernel. They did port in a bundle of "real" FreeBSD userland stuff that was current in about 1999 to shore things up. It's not a modern Net/Free/OpenBSD by any stretch of the imagination.
He said 800 millihertz. That's a clock cycle of .8 seconds. The processor better be TTL based or static CMOS, because dynamicâ registers aren't going to stay refreshed running that slow.
Apple Mac computers?
What about the Apple non-Mac computers?
What is this, a horrifically bad attempt to troll the numerate and literate amongst the slashdot readership? You know it's a 1.25 second clock-cycle and you should not pretend otherwise. Serious triggerings are occuring.
Slashdot: where don knuth is an idiot because he cant grasp the awesome power of php
what happens when the malware encrypts your backups because you kept them on always attached storage?
you know the rest.
Is it: "But Slashdot has already had the same story hook every couple of months since it exists?" Or is it " If you are a Windows user, you should be aware of new variants of malware that have been created specifically to target Windows computers"? Or maybe "But that means I don't have to worry about Raspberry Pi malware any more, right?"
Of course news about a fake are Fake News.
It's NeXTStep, an ancient broken derivative of BSD but with a different kernel. They did port in a bundle of "real" FreeBSD userland stuff that was current in about 1999 to shore things up. It's not a modern Net/Free/OpenBSD by any stretch of the imagination.
It could be worse: unlike Linux, it's at least a real UNIX.
Of course news about a fake are Fake News.
He said 800 millihertz. That's a clock cycle of .8 seconds.
WTF? No, it isn't, it*s 1.25 seconds.
Of course news about a fake are Fake News.