New in OS X: Get MacRumors Push Notifications on your Mac

Resubscribe Now Close

Bitcoin-Stealing OS X Trojan Now Masquerading as 'Angry Birds' and Other Popular Mac Apps

bitcoin.pngA Bitcoin-stealing trojan has been detected in downloads claiming to be cracked versions of popular Mac applications, reports security firm ESET through its We Live Security blog. The OSX/CoinThief.A malware was discovered in popular Bitcoin software earlier this month by SecureMac, but is now being used to target users of more mainstream apps.

The trojan initially surfaced on open source software hosting site GitHub, and it was quickly bundled into several Bitcoin apps available through multiple download sites. Further investigation by ESET has now uncovered the trojan masquerading as cracked versions of popular Mac apps such as BBEdit, Pixelmator, Angry Birds, and Delicious Library.

OSX/CoinThief.A involves a malicious browser add-on used to intercept logins for Bitcoin wallet sites and related exchanges such as MtGox, BTC-e, and blockchain.info. Stolen login credentials are then forwarded to the malware's developer.
There is clearly strong evidence that the trojan was specifically designed to profit from the current Bitcoin craze and fluctuating exchange rates.

According to detection statistics gathered by the ESET LiveGrid, the threat is mostly active amongst Mac users based in the United States.
The websites where these files are being distributed from have not been revealed, but Mac owners can prevent infection by avoiding pirated software and downloading titles directly from the developer's website or the Mac App Store. Users can find instructions on how to check for and remove the malware on SecureMac's blog post.

Top Rated Comments

(View all)

9 months ago
Pirated software users are surprised that some of these cracked software might be Trojan carriers?
Rating: 28 Votes
9 months ago
Joke's on them, I own 0 bitcoins.
Rating: 23 Votes
9 months ago
Downloading cracked apps is like eating out of a garbage bin. Sure, you might find something that looks tasty in there, but even if it looks good it will still probably get you sick.
Rating: 22 Votes
9 months ago
This is why code signing and Gatekeeper exist.
Rating: 21 Votes
9 months ago
Only in cracked versions = no problem.
Rating: 18 Votes
9 months ago

Seems to be a catch22 for Apple. The more successful and ubiquitous it becomes, the more it will be targeted by the nefarious. All the more so because of the statistical affluence of the user base. That's a shame.


How is it a catch 22 for Apple when there are idiots going out to download pirated software because they're too bloody cheap to purchase a legitimate copy via the AppStore? That's like blaming Microsoft for some person downloading Creative Suite off a bittorrenting website then complaining that all their credit card information has been stolen and its apparently all Microsoft's fault.
Rating: 16 Votes
9 months ago
I have very little sympathy for people who install cracked apps
Rating: 15 Votes
9 months ago
I have to wonder why you can buy a $1,000 Apple computer, but you can't buy a $5 game.

Those people deserve it. Mining your own money, but taking someone else's? No excuse.
Rating: 12 Votes
9 months ago

see, this is why i prefer dogecoin.

Security through obscurity! :d


Rating: 11 Votes
9 months ago
In case anyone is new to Bitcoin:

Bitcoin works by letting you take your money and put it inside your computer. You then say goodbye to your money.
Rating: 10 Votes

[ Read All Comments ]