

- #Handbrake mac malware for mac os x
- #Handbrake mac malware for mac
- #Handbrake mac malware password
- #Handbrake mac malware download
- #Handbrake mac malware windows
The company said anyone who downloaded the app during that period has a “50/50 chance” of being infected. EDT Saturday may have been hit by the exploit.
#Handbrake mac malware for mac
The makers of HandBrake said anyone who downloaded the app for Mac from 10:30 a.m. Read: Mac Malware: OSX/Dok Bypasses Apple Security, Steals Internet Activity
#Handbrake mac malware download
HandBrake.Popular open source MacOS video converter HandBrake was compromised by malware for nearly five days earlier this month, a message from the company behind the application revealed Monday.Ī download mirror server used to host HandBrake was hacked, and a modified version of HandBrake that contained a variant of the OSX.Proton Trojan was uploaded in its place, meaning anyone who downloaded the app from the compromised server may have been infected. Most are, no doubt, in too much of a hurry burning DVDs and converting video files to bother with such dull and tedious security checks.Ĭhecking checksums may be a chore, but in all likelihood it would have saved the bacon of some of the app's downloaders in the last few days. HandBrake advises that users check the SHA checksum when they download new versions of the app from its mirror site, but it's hard to imagine that many people ever bother to do such a thing.
#Handbrake mac malware password
So yeah, if you see any suspicious password dialogs, do NOT enter your password. As this was also something I was unfamiliar with, I again declined but the dialog immediately reappeared upon clicking cancel and I had to restart the computer to make it go away. Shortly afterword I was shown another dialog, independent from Handbrake, purporting to be from the system "Network Configuration" which needed my password to "update DHCP settings". As a longtime Handbrake user I was certain that this was *not* normal, so I declined. I download Handbrake last week and was surprised to see a dialog on launch asking me to enter my password to "install additional codecs". That said, I'm posting because I nearly got caught by this. Security slip-ups can happen to anyone and I'm sure they will take the necessary measures to improve this for future. Handbrake is an excellent program that has served me well over the years and I have great respect for the developers.

One long-term user of HandBrake described on the MacRumors forum just how close he came to having his credentials compromised by the malware attack: Personally, I think any Mac users connecting to the internet without an anti-virus solution in place are being downright foolhardy.
#Handbrake mac malware for mac os x
Yes, there's a lot less malware for Mac OS X than there is for Microsoft Windows, but that's going to be little consolation if you're unfortunate enough to find yourself a victim.
#Handbrake mac malware windows
In recent years take-up of Mac security solutions has risen as the threat has risen - but it still drags (as do the malware numbers for the platform) compared to Microsoft Windows users. The sad truth, of course, is that Mac users are typically less likely to be running an anti-virus product than their Windows counterparts - making them a soft target for cybercriminals interested in targeting the platform. Up-to-date ESET security products detect the malicious download as OSX/Proton.A - a trojan horse which allows malicious attackers to remotely access infected Mac computers, opening up opportunities for hackers to take screenshots of infected computers, capture credit card details and passwords as they are entered on the keyboard, hijack the webcam, and steal files.Ĭoncerned users of anti-virus products from other vendors would be wise to contact them directly to see if their Mac security solutions are detecting this latest variant of the Proton remote access trojan. You have 50/50 chance if you've downloaded HandBrake during this period.

The first most Mac users will know about the security incident will be when they visit the app's website, at, and see a link to a "Security Alert":Īnyone who has downloaded HandBrake on Mac between and needs to verify the SHA1 / 256 sum of the file before running it.Īnyone who has installed HandBrake for Mac needs to verify their system is not infected with a Trojan. A mirror download server for the popular tool HandBrake video file-transcoding app has been compromised by hackers, who replaced its Mac edition with malware.
