KeRanger
- First seen
- 2016-03-04 00:00:00
- Malware type
- ransomware
- Profile updated
- 2026-07-07 15:42:46
Targeted industries: technology-and-telecommunications media-and-entertainment
Context
KeRanger is an OS X ransomware that encrypts files on macOS systems and demands a ransom for decryption. It was one of the first ransomware targeting Mac users, distributed via a compromised version of a popular BitTorrent client.
Reports & references
- news.drweb.com — Show (report)
- ESET — New Mac Ransomware Appears Keranger Spread Via Transmission App (report)
- id-ransomware.blogspot.com — Keranger Ransomware (report)
- malpedia.caad.fkie.fraunhofer.de — Osx.Keranger (report)
- researchcenter.paloaltonetworks.com — New Os X Ransomware Keranger Infected Transmission Bittorrent Client Installer (report)
- objective-see.com — Blog 0X16 (report)
- macworld.com — Keranger The First In The Wild Ransomware For Macs But Certainly Not The Last (report)