In a blog post published Monday morning, Thomas Reed, director of Mac offerings at antivirus provider Malwarebytes, wrote: Once installed, the malware sent a variety of sensitive user files to the same server.
When the malicious download was opened, it directed users to enter their Mac administrator password, which was then uploaded in plain text to a server controlled by the attackers. That's according to researcher Patrick Wardle, who reported results here and here from the VirusTotal file-scanning service. At the time that the malware was being distributed to unsuspecting Mac users, none of the 55 most widely used antivirus services detected it. Over a four-day period ending Saturday, a download mirror located at delivered a version of the DVD ripping and video conversion software that contained a backdoor known as Proton, HandBrake developers warned over the weekend.
Hackers compromised a download server for a popular media-encoding software named HandBrake and used it to push stealthy malware that stole victims' password keychains, password vaults, and possibly the master credentials that decrypted them, security researchers said Monday.
0 kommentar(er)
