MacOS BitTorrent client infected with malware
The Transmission BitTorrent client for MacOS has again been infected with malware, TorrentFreak reports.
Transmission confirmed the attack, saying its servers were compromised and steps have been taken to ensure greater security in future.
Transmission has been compromised twice this year. In March, security researchers found KeRanger ransomware embedded in the BitTorrent client’s installer.
The new malware is called OSX/Keydnap, named by ESET when discovered last month.
ESET said the malware is designed to steal the content of your MacOS keychain while maintaining a permanent backdoor.
“The OSX/Keydnap backdoor is equipped with a mechanism to gather and exfiltrate passwords and keys stored in OS X’s keychain,” said ESET.
“The author took a proof-of-concept example available on Github called Keychaindump. It reads securityd’s memory and searches for the decryption key for the user’s keychain. This process is described in a paper by K. Lee and H. Koo,” it said.
More on Apple security
Serious iPhone security vulnerability – update now
Apple offers 0,000 security bug bounty
Apple OS X vulnerable to big 0-day security flaw
Apple users targeted in ransomware attack
Loading ...