Apple's Beats brand in April unveiled the Powerbeats Pro, a redesigned wire-free version of its popular fitness-oriented Powerbeats earbuds.
Transmission Malware Transmitted Through Server Hack, Downloaded 6,500 Times
Over the weekend, the first instance of Mac ransomware was found in a malicious update to the Transmission BitTorrent client. Version 2.90 of Transmission downloaded from the Transmission website was infected with "KeRanger" ransomware.
"Ransomware" is a class of malware that encrypts a user's hard drive and files, demanding money to decrypt it. In this case, KeRanger would have required Mac users to shell out a bitcoin for decryption, equivalent to approximately $400.
The developers behind Transmission have shared some additional details on the attack with Reuters, giving us some insight into how it occurred. The server that delivers the Transmission software to customers was breached in a cyber attack, allowing the KeRanger malware to be added to the disk-image of its software.
On Sunday, Transmission's developers released software updates to block the malicious software and to remove it from the Macs of users who had unwittingly installed the malicious version. Apple also updated its software protections to keep the malware from affecting Mac users and to prevent the bad version from being installed on additional machines.
Customers who have downloaded the Transmission BitTorrent client should make sure they have updated the software to version 2.92, which will remove the malware from infected computers. Additional details on how to determine if you have the malware installed are available through Palo Alto Networks.
"Ransomware" is a class of malware that encrypts a user's hard drive and files, demanding money to decrypt it. In this case, KeRanger would have required Mac users to shell out a bitcoin for decryption, equivalent to approximately $400.
The developers behind Transmission have shared some additional details on the attack with Reuters, giving us some insight into how it occurred. The server that delivers the Transmission software to customers was breached in a cyber attack, allowing the KeRanger malware to be added to the disk-image of its software.
Transmission representative John Clay told Reuters via email that the ransomware was added to disk-image of its software after the project's server was compromised in a cyber attack.During the time that the malware-infected version of Transmission was available, it was downloaded approximately 6,500 times before the vulnerability was discovered. Security on the server has since been increased, ensuring a similar attack can't occur a second time.
"We're not commenting on the avenue of attack, other than to say that it was our main server that was compromised," he said. "The normal disk image (was) replaced by the compromised one."
On Sunday, Transmission's developers released software updates to block the malicious software and to remove it from the Macs of users who had unwittingly installed the malicious version. Apple also updated its software protections to keep the malware from affecting Mac users and to prevent the bad version from being installed on additional machines.
Customers who have downloaded the Transmission BitTorrent client should make sure they have updated the software to version 2.92, which will remove the malware from infected computers. Additional details on how to determine if you have the malware installed are available through Palo Alto Networks.
Tag: Transmission
[ 125 comments ]
Top Rated Comments
(View all)
43 months ago
I have zero sympathy for people who pirate stuff
Guessing the guys that think torrenting is strictly for piracy are the same guys that think an FBI backdoor gives us more freedom...
43 months ago
It'd be nice if the Transmission developers would explain how their site got compromised.
Still no word from them at all. We need a statement from them to show how this happened and the steps they are taking to prevent it from happening again, otherwise all trust in this developer is pretty much gone.
Still no word from them at all. We need a statement from them to show how this happened and the steps they are taking to prevent it from happening again, otherwise all trust in this developer is pretty much gone.
43 months ago
I like that the Transmission developers built-in a solution to the problem into the update, instead of just telling users to get an anti-virus to figure it out. This is good of them, and something that I don't ever see in the Windows world.
43 months ago
It'd be nice if the Transmission developers would explain how their site got compromised.
Still no word from them at all. We need a statement from them to show how this happened and the steps they are taking to prevent it from happening again, otherwise all trust in this developer is pretty much gone.
43 months ago
Torrenting is used overwhelming for pirating. I have zero sympathy for those that pirate.
First off - I have never been a fan of any torrent site or applications. I get all my files from legitimate sources and I pay for my music/videos.
I also have ZERO sympathy. But for people who know very little or who are completely oblivious to the real world use of torrenting and comment like they are in the "know" and lift their noses in disgust. I have several clients and collaborators who I constantly share very large files with. Many of my clients are game developers and video editors and they deal with large chunks of files that are much easier and quicker to download as a torrent as opposed to a large single file when collaborating.
Here are just a few examples of LEGAL everyday uses of torrenting:
* Blizzard Entertainment uses its own BitTorrent client to download World of Warcraft, Starcraft II, and Diablo III games. When you purchase one of these games and download it, you’re actually just downloading a BitTorrent client that will do the rest of the work.
* Facebook and Twitter Use BitTorrent Internally
* Many government agencies use torrent files.
While yes, most pirated items are shared and downloaded via torrent files, not all torrent files are used for pirating. That's like saying that most car thieves use coat hangers to break into cars so anyone who uses a coat hanger must be a thief. Please!
43 months ago
How did this occur? It seems someone took control of their update server, and put the nefarious code in there. Word to the wise? Just don't torrent at all.
Could've been any non-MAS app with a wide audience. Imagine if it was Spotify. "Word to the wise: don't stream music you paid for"?
43 months ago
Still no word from them at all. We need a statement from them to show how this happened and the steps they are taking to prevent it from happening again, otherwise all trust in this developer is pretty much gone.
Assuming their reason for not commenting isn't because of sheer incompetence (as foobarbaz suggested) ... there are pretty valid reasons not to go into details about the nature of the attack.
* The technical explanation would benefit few users
* It provides more details about the server or how their security operates; which may provide greater information to people seeking to compromise the Transmission servers, or worse, compromise another similarly-structured server.
43 months ago
BitTorrent......enough said!
Apple is Running BitTorrent Trackers in Cupertino ('https://torrentfreak.com/apple-is-running-bittorrent-trackers-in-cupertino-160306/')
43 months ago
There is no legal requirement to restrict your software sources to a managed app store. And if you read through the legalese of any software you install, they almost always claim that the vendor cannot be held responsible for any potential damage whatsoever. In fact, one might conclude from all the disclaimers that the software is not fit for any purpose.
The fact that something is stated in the disclaimers and the end-user license agreement does not automatically make it legally valid.[ Read All Comments ]
Satechi, known for its line of accessories for Apple's iOS and Mac devices, today announced the launch of its first HomeKit product, the Dual Smart Outlet.
Priced at $60, the Dual Smart...
Kanex today announced the launch of its iAdapt Multiport Docking Station for the 2018 iPad Pro models, designed to add a range of additional ports to the devices using the built-in USB-C port.
...
Microsoft has released a native Mac version of its To-Do app for the first time, meaning macOS users will no longer have to rely on company's the web app to access the to-do list service.
...
Apple appears to be continuing its recent trend of making app subscriptions more transparent and manageable, as evidenced by another change discovered in the latest developer beta of iOS 13. When you...
Belkin today announced that its InvisiGlass Ultra Front and Back Protection for the latest iPhone models is now available for purchase from Apple.
The InvisiGlass Ultra Front and Back...
Apple this morning released the second beta of watchOS 6, the software that runs on the Apple Watch. The second beta comes two weeks after Apple first unveiled the new update at the Worldwide...
Apple today seeded the second beta of an upcoming tvOS 13 update to developers, two weeks after first unveiling the tvOS 13 software at the Worldwide Developers Conference.
Designed for the...
Aspyr has announced that today is the last day of sales for its 32-bit Mac games, in anticipation of Apple's upcoming move to 64-bit only apps on macOS Catalina later this year.
After...
