Researchers say the malware is being distributed via pirated versions of pirated software. Ransomware EvilQuest has capabilities for in-memory code execution, anti-analysis and persistence. The malware also has a keylogger and can steal cryptocurrency wallets on victims systems. The ransom for the samples found was $50, and the ransom note is read aloud to the victim via the Mac’s built-in voice capabilities. It joins a small list of ransomware families in the wild specifically targeting Mac users.
Source: https://threatpost.com/evilquest-mac-ransomware-keylogger-crypto-wallet-stealing/157034/