And now the first successful ransomware attack on Mac users occurred this weekend, using malware designed to lock files on a targeted computer three days after infection, reports Reuters' Jim Finkle. Targeted users could start seeing their files locked on Monday.
Finkle was told about the attack by security researchers at Palo Alto Networks.
While there have been previous reports of Mac users attacked by ransomware, such as an attack back in 2013; in that case, the attack was more or less faked.
Attackers were able to embed a little bit of code in the browser that made it look like the Mac (or Windows) machine was locked and encrypted when only the browser was affected, reported security researchers at Malwarebytes.
But it seemed only a matter of time before Macs would get their own ransomware. Security researchers have been writing more and more proof-of-concept Mac ransomware and a few successful attempts were shared by at least two different researchers last fall. The idea of proving and sharing such code is to allow Apple and others to fix the holes that would let real hackers get in.
The good news is that Apple may have developed a fix to stop this particular ransomware attack. This malware appears to have snuck into an app called Transmission, a way for people to share movies and other content via sharing tech called BitTorrent. Apple has come up with a way to block Macs from installing the infected version of this app.
The Transmission website carries a warning telling people to upgrade to a new version of the app immediately, and offers instructions to check if your Mac was infected.
The bad news is that, given the rise in popularity of Macs, particularly in businesses and other targets with deep pockets, this also might be just the beginning of ransomware in the wild for Macs, and comes into the your computer in other ways.
Transmission