Macx dvd ripper torrent software#

Because the other site wasn't compromised, people who downloaded the app from May 2 to May 6 had a 50-50 chance of obtaining the malicious version. HandBrake maintainers said the hacked mirror site was one of two servers used to distribute the app. (Pro tip: never store the master password for your password manager in the keychain, and make sure it’s a unique, strong password!) Since the user’s password was phished previously, that can be used to unlock the keychains, and either it or other passwords found in the keychain may be able to unlock other encrypted files.

These files contain a number of bits of data to be exfiltrated from the machine, such as browser data (including stored form auto-fill data), keychains, and even 1Password vaults. In a blog post published Monday morning, Thomas Reed, director of Mac offerings at antivirus provider Malwarebytes, wrote: Once installed, the malware sent a variety of sensitive user files to the same server. When the malicious download was opened, it directed users to enter their Mac administrator password, which was then uploaded in plain text to a server controlled by the attackers. That's according to researcher Patrick Wardle, who reported results here and here from the VirusTotal file-scanning service. At the time that the malware was being distributed to unsuspecting Mac users, none of the 55 most widely used antivirus services detected it.

Macx dvd ripper torrent software#

Over a four-day period ending Saturday, a download mirror located at delivered a version of the DVD ripping and video conversion software that contained a backdoor known as Proton, HandBrake developers warned over the weekend.

Hackers compromised a download server for a popular media-encoding software named HandBrake and used it to push stealthy malware that stole victims' password keychains, password vaults, and possibly the master credentials that decrypted them, security researchers said Monday.