The dreaded LockBit ransomware now targets Apple Macs, a first

Security researchers have discovered a brand new version of LockBit ransomware. Indeed, a group of security researchers known as MalwareHunterTeam recentlyA version of Lockbit ransomware designed to compromise macOS devices, namely Mac and MacBook laptops of the American manufacturer.

As far as the group knows, this announcement marks the first public announcement that Lockbit ransomware could be used against Apple computers, but apparently the gang has been offering the capability since last fall. As a reminder, it was he who was presented for free access to social networks last September, representing a real blow to the field of hacking.

Apple Macs are no longer immune to LockBit

A new version named “locker_Apple_M1_64” can infect Apple Macs. Historically, Russia-based Lockbit, It uses encryptors designed to attack Windows, Linux, and VMware ESXi servers. Lockbit is particularly known for attacking the giant Thales, and the group even targeted the Ministry of Justice in France last year.

However, researchers found a ZIP archive on Virus Total containing: Previously unknown passwords for macOS, ARM, FreeBSD, MIPS and SPARC. The MalwareHunter team did not find any references to LockBit ransomware targeting Macs before an early release was released in November last year, and no one mentioned its existence until April 16 this year. So, we may see an influx of Mac ransomware infections, especially if the LockBit gang decides to bring the Mac version to the mainstream.

Another researcher says Lockbit for Mac isn’t ready yet

Apple security expert Patrick Wardle analyzed the macOS version of LockBit and found that although it can run on Macs and encrypt files, does not pose a real risk at the moment. According to him, the analyzed malware sample was signed, but not with a trusted certificatei.e. macOS was preventing it from working. Additionally, even if this type of ransomware manages to run on a macOS device, file system protections such as TCC (Transparency, Consent, and Control) implemented by Apple, likely to significantly limit its impact.

The cybersecurity researcher even pointed out some flaws in the software that could cause it to suddenly stop working on macOS. One of both this version doesn’t seem quite ready to threaten the security of Apple users.nothing says the next version won’t fix all these issues.

What is known is that the group uses it for their own purposes, as well as giving access to ransomware to other criminals willing to pay. Hoping others can use it too, It makes sense that ransomware attacks on Macs will increase in the near futurebut of course we will keep you informed.

According to an indictment issued by the U.S. Department of Justice last fall, LockBit “ one of the most active and destructive ransomware variants in the world Although it has recently lost its crown as the scariest ransomware, it is still extremely dangerous.

Contrary to popular belief, Apple systems are also very vulnerable to threats, and not all are more secure than their competitors. MacBooks not only have ransomware, but also have dangerous vulnerabilities that allow hackers to remotely take control of your device.