A bogus installer for Little Snitch carries a ransomware hitchhiker.
New malware found on a Russian forum takes advantage of the apparently insatiable appetite for pirated software. In this case, a torrent for application firewall Little Snitch actually opens into a downloader for MacOS-based ransomware.
According to researchers at Malwarebytes, there are obvious visual indications that the file downloaded is not a legitimate Little Snitch installer. The malware presents itself as a much more primitive installer rather than the quite professional, legitimate installation tool.
But the malware seems to have difficulty installing and running, according to the researchers, who test-ran it in their lab. It finally encrypts files after three days, multiple reboots, but with some help from the researchers.
There is still much to learn about this new ransomware, including which encryption routines it is using and whether it's under active development, they note. In the meantime, they recommend maintaining a very good data backup and recovery routine as insurance against all ransomware.
For more, read here.
About the Author(s)
You May Also Like
The fuel in the new AI race: Data
April 23, 2024Securing Code in the Age of AI
April 24, 2024Beyond Spam Filters and Firewalls: Preventing Business Email Compromises in the Modern Enterprise
April 30, 2024Key Findings from the State of AppSec Report 2024
May 7, 2024Is AI Identifying Threats to Your Network?
May 14, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024