Blog | G5 Cyber Security

Mac password-stealing malware haunts Transmission app again

The first time it happened to popular BitTorrent client Transmission was back in March 2016. This time, a bogus version of Transmission 2.92 was uploaded that contained malware known as OSX/PWSSync-B. The hack that was applied to the Transmission app this time is very similar to the previous attack. The hacked Transmission program itself contains only a tiny change: a small snippet of code added at the start that loads a file called License.rtf that is packaged into the application bundle. Its actually an OS X executable (program file) that runs automatically every time you reboot or logon.”]

Source: https://nakedsecurity.sophos.com/2016/09/01/mac-password-stealing-malware-haunts-transmission-app-again/

Exit mobile version