MacOS Ransomware Bricks Your Device
Posted by: Timothy Weaver on 02/23/2017 02:18 PM
[
Comments
]
Are you looking for a torrent file to crack software like Adobe Premiere Pro or Microsoft Office?
Beware, cybercriminals are packing torrents with a new family of ransomware called Patcher which when the zip file is opened loads your Mac with the ransomware. What's so scary about this new malware is that they bungled the encryption process and restoring your files is impossible.
The downloaded files will end with the Patcher name and when launched, it will open a window with no background. According to ESET researchers, Patcher generates a 25-character-long random number that it uses as the encryption key to lock user files.
Patcher doesn't send that encryption key to an online server. So the victim is screwed.
Patcher will search and encrypt files in the user's /Users directory and in all mounted external and network storage drives found under /Volumes.
"This new crypto-ransomware, designed specifically for macOS, is surely not a masterpiece," says ESET's Marc-Etienne M.Léveillé. "Unfortunately, it’s still effective enough to prevent the victims accessing their own files and could cause serious damage."
Source: Bleeping Computer

The downloaded files will end with the Patcher name and when launched, it will open a window with no background. According to ESET researchers, Patcher generates a 25-character-long random number that it uses as the encryption key to lock user files.
Patcher doesn't send that encryption key to an online server. So the victim is screwed.
Patcher will search and encrypt files in the user's /Users directory and in all mounted external and network storage drives found under /Volumes.
"This new crypto-ransomware, designed specifically for macOS, is surely not a masterpiece," says ESET's Marc-Etienne M.Léveillé. "Unfortunately, it’s still effective enough to prevent the victims accessing their own files and could cause serious damage."
Source: Bleeping Computer
Comments