Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Should I update through the app or risk it through their website? Scary stuff. I dodged a bullet it would seem. Updated to 2.9 via in app update.
 
  • Like
Reactions: sd70mac
Cant really blame Apple for data loss if you
(a) Don't make regular backups
(b) Install bit torrent clients (from a website no less) Which have little or no legitimate use other than piracy

to be expected when people use BitTorrent, I have zero sympathy for people who pirate stuff!

Torrent are used for more than piracy my friend, we are not in the early 2000 anymore!!

All Linux distribution are downoadable with torrent and they are 100% legit!
 
Lol, I don't think I've met an even SLIGHTLY savvy computer user (Mac or PC) in the last eight years or so that uses a client other than uTorrent.
Given that ALL torrent apps are free, why would anyone download this????????
 
Couldnt you just restore from an earlier time machine backup to work around the encryption lock?
As others have already mentioned sort of mentioned, no.

I don't know the specifics of this malware, but for similar malware on Windows it will encrypt ALL data it has access to, which would include your time machine backups. Your time machine drive is accessible directly from your mac, so the malware would have access too.

This is pretty important to mention, so I thought it would be good to confirm. There have been cases of this type of malware on PC where the affected wasn't able to use their backups because the backups got encrypted too. You're only safe if the backups are physically not accessible by the machine after you're done making them, because as soon as it has access to files it can encrypt them.


Edit: The article with more information linked a few posts up mentions that the logic to encrypt Time Machine backups is 'unfinished'. But it also mentions that it encrypts everything under /Volumes/. Time Machine drives mount under /Volumes/ (at least mine is...) so it's not clear to me whether it would encrypt them or not. Based on the fact it encrypts everything under /Volumes/ I assume this includes Time Machine anyway, but I'm not positive.
 
Last edited:
  • Like
Reactions: sd70mac
http://researchcenter.paloaltonetwo...ted-transmission-bittorrent-client-installer/

Attackers infected two installers of Transmission version 2.90 with KeRanger on the morning of March 4.

Additionally, KeRanger appears to still be under active development and it seems the malware is also attempting to encrypt Time Machine backup files to prevent victims from recovering their back-up data.

Users who have directly downloaded Transmission installer from official website after 11:00am PST, March 4, 2016 and before 7:00pm PST, March 5, 2016, may be been infected by KeRanger.
 
Last edited:
  • Like
Reactions: You are the One
Lol, I don't think I've met an even SLIGHTLY savvy computer user (Mac or PC) in the last eight years or so that uses a client other than uTorrent.
Given that ALL torrent apps are free, why would anyone download this????????

Transmission was a pretty good application that didn't have all the junk and spyware uTorrent tries to install. I don't know why a tech savvy user would be using uTorrent, though I guess the same holds true for Transmission now.
 
Lol, I don't think I've met an even SLIGHTLY savvy computer user (Mac or PC) in the last eight years or so that uses a client other than uTorrent.
Given that ALL torrent apps are free, why would anyone download this????????

I doubt you know many Mac torrent users then, because Transmission is very popular among Mac users. uTorrent now bundles adware along with their installer, so there is also that.
 
just started the app, I saw the warning and updated it.
Shame on the developer here (since the infected app was downloaded from their website).

Quite often, to meet demand, these site use "mirror" servers, and it's possible that a rogue mirror slipped into there somehow? Verification should be getting performed on the binaries provided by each mirror.
 
  • Like
Reactions: sd70mac
So if you upgraded "within" the software you're safe? You're only affected if you downloaded the software from transmissions webpage?
 
  • Like
Reactions: sd70mac
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.