Mac app developers issue malware warning after server compromise

[RV_]

Those who downloaded HandBrake between certain dates have a '50/50 chance' of being infected with a Remote Access Trojan.

 

Excerpt:

"Users who've recently downloaded the Handbrake video transcoder app for Apple Mac may have been infected with Trojan malware.

The creators of the platform have issued a statement warning that anyone who downloaded Handbrake on Mac between 2 May (14:30 UTC) and 6 May (11:00 UTC) from the downloadhandbrake.fr mirror could be at risk.

"Anyone who has installed HandBrake for Mac needs to verify their system is not infected with a Trojan. You have 50/50 chance if you've downloaded HandBrake during this period," said the creators of HandBrake.

Those infected are at risk from cyberthieves stealing login credentials from OSX KeyChain, Apple's password management system, or from passwords stored in any browsers.

Anyone who downloaded Handbrake from the 'download.handbrake.fr' mirror is at risk -- and those who see a process called "Activity_agent" in the OSX Activity Monitor application are infected with the Trojan and should change all their passwords.

The specific malware variant which Handbrake users may have found themselves targeted by is a variant of the MacOS Proton RAT, regularly touted on Russian underground forums as a way to compromise Mac machines for the purposes of spying and theft.

Proton RAT is capable of activities including keylogging, screenshop capture, webcam operation, and more, providing a veritable treasure trove of information to spies and cybercriminals."

More withj related links here: http://www.zdnet.com/article/mac-app-developers-issue-malware-warning-after-server-compromise/?loc=newsletter_featured_related_listing&ftag=TRE17cfd61&bhid=19724681974700635514865380622813