Security News > 2023 > April > LockBit crew cooks up half-baked Mac ransomware

LockBit has developed ransomware that can encrypt files on Arm-powered Macs, said to be a first for the prolific cybercrime crew.

"As much as I can tell, this is the first Apple's Mac devices targeting build of LockBit ransomware sample seen," MHT tweeted over the weekend.

LockBit, a highly prolific ransomware-as-a-service operation with ties to Russia, has been around since 2019, deploying its malware against high-profile targets in multiple nations.

As infosec maven Patrick Wardle pointed out in his technical analysis of the code, the software nasty uses an invalid digital signature, which means it won't easily run on Apple's desktop operating system even if it's downloaded to a Mac device.

Still, the fact that LockBit are working to develop file-scrambling tools for infected Mac devices indicates yet another avenue for cybercriminals to expand their businesses, if not now then in the future.

"While this iteration isn't close to ready for primetime, it's nonetheless an indication that LockBit was, and possibly still is, looking at Macs as a potential target," Emsisoft threat analyst Brett Callow told The Register.

News URL

https://go.theregister.com/feed/www.theregister.com/2023/04/17/lockbit_ransomware_mac_devices/