New in OS X: Get MacRumors Push Notifications on your Mac

Resubscribe Now Close

Bitcoin-Stealing OS X Trojan Now Masquerading as 'Angry Birds' and Other Popular Mac Apps

Thursday February 27, 2014 9:02 am PST by Kelly Hodgkins
bitcoin.pngA Bitcoin-stealing trojan has been detected in downloads claiming to be cracked versions of popular Mac applications, reports security firm ESET through its We Live Security blog. The OSX/CoinThief.A malware was discovered in popular Bitcoin software earlier this month by SecureMac, but is now being used to target users of more mainstream apps.

The trojan initially surfaced on open source software hosting site GitHub, and it was quickly bundled into several Bitcoin apps available through multiple download sites. Further investigation by ESET has now uncovered the trojan masquerading as cracked versions of popular Mac apps such as BBEdit, Pixelmator, Angry Birds, and Delicious Library.

OSX/CoinThief.A involves a malicious browser add-on used to intercept logins for Bitcoin wallet sites and related exchanges such as MtGox, BTC-e, and blockchain.info. Stolen login credentials are then forwarded to the malware's developer.
There is clearly strong evidence that the trojan was specifically designed to profit from the current Bitcoin craze and fluctuating exchange rates.

According to detection statistics gathered by the ESET LiveGrid, the threat is mostly active amongst Mac users based in the United States.
The websites where these files are being distributed from have not been revealed, but Mac owners can prevent infection by avoiding pirated software and downloading titles directly from the developer's website or the Mac App Store. Users can find instructions on how to check for and remove the malware on SecureMac's blog post.

[ 127 comments ]


Top Rated Comments

(View all)

Avatar
satcomer
65 months ago
Pirated software users are surprised that some of these cracked software might be Trojan carriers?
Rating: 28 Votes
Avatar
JetBlack7
65 months ago
Joke's on them, I own 0 bitcoins.
Rating: 23 Votes
Avatar
dustinsc
65 months ago
Downloading cracked apps is like eating out of a garbage bin. Sure, you might find something that looks tasty in there, but even if it looks good it will still probably get you sick.
Rating: 22 Votes
Avatar
tuartboy
65 months ago
This is why code signing and Gatekeeper exist.
Rating: 21 Votes
Avatar
Plutonius
65 months ago
Only in cracked versions = no problem.
Rating: 18 Votes
Avatar
WallToWallMacs
65 months ago

Seems to be a catch22 for Apple. The more successful and ubiquitous it becomes, the more it will be targeted by the nefarious. All the more so because of the statistical affluence of the user base. That's a shame.


How is it a catch 22 for Apple when there are idiots going out to download pirated software because they're too bloody cheap to purchase a legitimate copy via the AppStore? That's like blaming Microsoft for some person downloading Creative Suite off a bittorrenting website then complaining that all their credit card information has been stolen and its apparently all Microsoft's fault.
Rating: 16 Votes
Avatar
Phil A.
65 months ago
I have very little sympathy for people who install cracked apps
Rating: 15 Votes
Avatar
Jessica Lares
65 months ago
I have to wonder why you can buy a $1,000 Apple computer, but you can't buy a $5 game.

Those people deserve it. Mining your own money, but taking someone else's? No excuse.
Rating: 12 Votes
Avatar
Gabichon
65 months ago

see, this is why i prefer dogecoin.

Security through obscurity! :d


<3
Rating: 11 Votes
Avatar
WestonHarvey1
65 months ago
In case anyone is new to Bitcoin:

Bitcoin works by letting you take your money and put it inside your computer. You then say goodbye to your money.
Rating: 10 Votes

[ Read All Comments ]