Article Image
News Link • Hacking, Cyber Security

Yet another software supply-chain attack hits popular applications.

• https://motherboard.vice.com, Lucian Constantin

Security researchers from antivirus firm ESET reported Friday that the free version of Elmedia Player distributed from Eltima Software's website contained a macOS information stealing trojan known as OSX/Proton. The same malware was distributed earlier this year through another trojanized version of a popular macOS application called HandBrake.

Eltima told me in an email that hackers also managed to trojanize one of the company's other applications, an internet download manager called Folx that also acts as a BitTorrent client.

The Proton malware is capable of stealing a lot of data from infected computers including history, cookies, bookmarks, and log-in data from browsers; cryptocurrency wallets; SSH authentication keys; macOS keychain data; Tunnelblick VPN configuration data; PGP encryption keys and data stored in 1Password, a password management application.

Join us on our Social Networks:

 

Share this page with your friends on your favorite social network: