![\"first_ever_ransomware_on__125184_229545\"](\"https:\/\/sitesdev.net\/articles\/wp-content\/uploads\/2016\/03\/first_ever_ransomware_on__125184_229545.jpg\")
It finally happened. Ransomware has officially made its first appearance on OSX. Anyone who downloaded version 2.90 of the \u201cTransmission\u201d App (which is a legitimate Bittorrent app available in the Apple Store) on or around March 4 should delete it immediately and install the clean 2.92 version.<\/p>\n
If you\u2019re not familiar with the term, ransomware is a very specific type of malware. Once it runs, it encrypts some or all of the files on your computer, making your data irretrievable. There are only two good ways around the problem. Either restore from backup, or pay the demanded ransom to the hackers, who will supposedly unlock the files for you once they lighten your wallet.<\/p>\n
Given that \u201cTransmission\u201d is a legitimate app with a valid certificate from Apple, no one is quite sure how the ransomware made its way into the code, but the issue is being investigated. For its part, Apple has revoked the certificate that allowed the malware to install, so if you try to start the infected App, you\u2019ll get a warning saying that it should not be opened as it will damage your system. That should prevent the great majority of the potential damage, but of course, all bets are off if you ignore the warning and run the app anyway.<\/p>\n
If you\u2019d like to make doubly sure that it is completely gone from your system, use Finder to look for either of the following:
\n\u201c\/Applications\/Transmission.app\/Contents\/Resources\/ General.rtf\u201d or \u201c\/Volumes\/Transmission\/Transmission.app\/Contents\/Resources\/ General.rtf\u201d
\nIf found, delete these files. Then, under your Activity monitor, check to see if there\u2019s a process called \u201ckernel_service\u201d running. If there is, select \u201cOpen Files and Ports\u201d and check for a file name like this: \u201c\/Users\/
\n\/Library\/kernel_service\u201d. If found, terminate this process with Quit \u2013 Force Quit, and you should be covered. While this is the first appearance of ransomware on OSX, you can bet it will not be the last. If the hackers have finally managed to find their way past Apple\u2019s vaunted security once, it\u2019s a sure bet they\u2019ll do it again.<\/p>\n","protected":false},"excerpt":{"rendered":"
It finally happened. Ransomware has officially made its first appearance on OSX. Anyone who downloaded version 2.90 of the \u201cTransmission\u201d App (which is a legitimate Bittorrent app available in the Apple Store) on or around March 4 should delete it immediately and install the clean 2.92 version. If you\u2019re not familiar with the term, ransomware […]<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"yoast_head":"\n