---
title: "New Mac-Targeting Ransomware is a Real Bad Apple - Get a Free Network Security Consultation in South Florida"
description: "Apple, long known for their superior security, has now joined the rest of the OS community and had their OS X software targeted by hackers. Read more to learn more."
url: "https://www.l7solutions.com/blog/new-mac-targeting-ransomware-is-a-real-bad-apple"
date: "2026-06-20T01:53:25+00:00"
language: "en-GB"
---
## Get a Free Network Security Consultation in South Florida
Get a free network security consultation today from L7 Solutions. We are your partner for managed services & IT support in South Florida and beyond. Call today.
[ Categories ](https://www.l7solutions.com/blog/categories "Categories")
[ Tags ](https://www.l7solutions.com/blog/tags "Tags")
[ Categories: All Categories ](https://www.l7solutions.com/javascript:void(0); "Categories")
Search...Suggested keywords
[ x ](https://www.l7solutions.com/javascript:void(0);)
# New Mac-Targeting Ransomware is a Real Bad Apple
[LSeven Solutions Blog](https://www.l7solutions.com/blog/categories/blog) [Security](https://www.l7solutions.com/blog/categories/security)
[LSeven Solutions Admin](https://www.l7solutions.com/blog/blogger/l7-admin)
Monday, 21 March 2016
[ 0 Comments ](https://www.l7solutions.com/blog/new-mac-targeting-ransomware-is-a-real-bad-apple#comments)
[](https://www.l7solutions.com/images/easyblog_shared/March_2016/3-21-16/iphone_ransomware_400.jpg "iphone_ransomware_400.jpg")Ransomware has been spreading like wildfire over the past few years, but up until very recently, Mac users were spared from this troubling development. Now, security researchers at Palo Alto Networks have discovered what they believe to be the first instance of completed ransomware on an Apple device. As this threat is “in the wild,” Mac users should be wary of it and see it as a potential threat.
The ransomware in question, KeRanger, is believed to be the first completed ransomware to exist on the OS X operating system. In 2014, Kaspersky Labs discovered an incomplete form of ransomware for the Mac platform, but it didn’t pose an immediate threat. Now, however, KeRanger marks the beginning of more dangerous threats finally making their way to Apple’s operating systems.
To make matters worse, this ransomware is spread through a torrenting software called Transmission, which is designed to share files. Though torrenting software has a bad reputation for distributing pirated content, like copyrighted films, tv shows, music, and much more, it has plenty of legitimate uses, as well.
As explained by *CNet*:
If a user installed one of the infected versions of Transmission, an executable file embedded within the software would run on the system. At first, there'd be no sign of a problem. But after three days, KeRanger would connect with servers over the anonymous Tor network and begin encrypting certain files on the Mac's system.
Researchers have concluded that KeRanger is still under development, and is seeking a way to also encrypt the victim’s backup data. In many cases, restoring a backup of your system’s data is the only way to remove ransomware. Thus, KeRanger is taking a significant step toward making it virtually impossible to recover your data without paying the ransom.
In response to the threat, Apple has revoked the security certificate that KeRanger takes advantage of, and has updated its XProtect antivirus software. Transmission has also removed the infected versions of its installer from its website. Still, those who already have unknowingly downloaded the Transmission installer between March 4th and 5th 2016 may be affected by KeRanger. If you want to know more about how to identify if you’re affected by KeRanger, you can review how to protect yourself on [Palo Alto Networks’ site](http://researchcenter.paloaltonetworks.com/2016/03/new-os-x-ransomware-keranger-infected-transmission-bittorrent-client-installer/).
As is the case with most other ransomware, decrypting the files on your own is nearly impossible. This is how hackers make their money off of ransomware; they play to the fear that users won’t be getting their data back. This is the reason why we always advocate that you take preventative steps to lessen the chances of your data falling victim to ransomware. Implementing a solid security solution is a great way to do so, and you should generally avoid torrenting files in the office anyway; it’s especially important that your employees understand this, too.
In the case of ransomware, the most important thing to remember is that you need to prevent your systems from getting infected before anything else. Otherwise, you risk everything. To make sure your systems are properly protected, give COMPANYNAME a call at PHONENUMBER.
[ ](https://www.l7solutions.com/javascript:void(0);) [ ](https://www.l7solutions.com/javascript:void(0);) [ ](https://www.l7solutions.com/javascript:void(0);)
Tags:
[Malware](https://www.l7solutions.com/blog/tags/malware) [Apple](https://www.l7solutions.com/blog/tags/apple) [Ransomware](https://www.l7solutions.com/blog/tags/ransomware)
[ Tip of the Week: 4 Brilliant Ways to Get More Work... ](https://www.l7solutions.com/blog/tip-of-the-week-4-brilliant-ways-to-get-more-work-done)
[ New Technology Delivers Staggering Data Retention ... ](https://www.l7solutions.com/blog/new-technology-delivers-staggering-data-retention-options)
About the author
[  ](https://www.l7solutions.com/blog/blogger/l7-admin)
[LSeven Solutions Admin](https://www.l7solutions.com/blog/blogger/l7-admin)
[ ](https://www.l7solutions.com/javascript:void(0); "Subscribe to updates from author") [ ](https://www.l7solutions.com/javascript:void(0);) [ ](https://www.l7solutions.com/blog/blogger/l7-admin)
Welcome to LSeven's Blog! Here we will share useful tips and tricks for Computers and Information on Our IT Services!
Author's recent posts
[More posts from author](https://www.l7solutions.com/blog/blogger/l7-admin)
[ Tuesday, 30 June 2026 Stop Managing Metal, Start Managing People: A Guide to Hybrid IT ](https://www.l7solutions.com/blog/stop-managing-metal-start-managing-people-a-guide-to-hybrid-it)
[ Saturday, 27 June 2026 Free AI is Not Free: Why Public Tools Are a Security Risk ](https://www.l7solutions.com/blog/free-ai-is-not-free-why-public-tools-are-a-security-risk)
[ Thursday, 25 June 2026 Phishing is Getting Sophisticated: The New Threats Businesses Face ](https://www.l7solutions.com/blog/phishing-is-getting-sophisticated-the-new-threats-businesses-face)
Comments
No comments made yet. Be the first to submit a comment
**** Already Registered? [Login Here](https://www.l7solutions.com/component/users/login?return=aHR0cHM6Ly93d3cubDdzb2x1dGlvbnMuY29tL2Jsb2cvbmV3LW1hYy10YXJnZXRpbmctcmFuc29td2FyZS1pcy1hLXJlYWwtYmFkLWFwcGxl&Itemid=101)
Saturday, 20 June 2026
Subscribe to the blog (Please fill in your email address to subscribe to updates from this post.)
**Captcha Image**
## Schema
```json
{
"@context": "https://schema.org",
"@type": "BreadcrumbList",
"itemListElement": [
{
"@type": "ListItem",
"position": 1,
"name": "Home",
"item": "https://www.l7solutions.com"
},
{
"@type": "ListItem",
"position": 2,
"name": "Blog",
"item": "https://www.l7solutions.com/blog"
},
{
"@type": "ListItem",
"position": 3,
"name": "LSeven Solutions Admin",
"item": "https://www.l7solutions.com/blog/blogger/l7-admin"
},
{
"@type": "ListItem",
"position": 4,
"name": "New Mac-Targeting Ransomware is a Real Bad Apple",
"item": "https://www.l7solutions.com/blog/new-mac-targeting-ransomware-is-a-real-bad-apple"
}
]
}
```