We saw two different fake application “Patchers”: one for Adobe Premiere Pro and one for Microsoft Office for Mac. The Torrent contains a single ZIP file – an application bundle. Distributionįigure 1 – BitTorrent site distributing Torrent files containing OSX/Filecoder.E This new ransomware, written in Swift, is distributed via BitTorrent distribution sites and calls itself “Patcher”, ostensibly an application for pirating popular software. While most of it targets the Windows desktop, we’ve also seen machines running Linux or macOS being compromised by ransomware in 2016 with, for example, KillDisk affecting Linux and KeRanger attacking OS X.Įarly last week, we have seen a new ransomware campaign for Mac. Written in Swift, it is distributed on BitTorrent distribution site as “Patcher” for pirating popular software.Ĭrypto-ransomware has been very popular lately amongst cybercriminals.
This last month we have seen a new ransomware for Mac.