It’s a known fact that downloading pirated software that is originally paid comes with a set of significant risks, including bundled malware that can put your devices and data at risk, and more. This is especially true for professional-grade software like Final Cut Pro X, which costs Rs 29,900. People often get lured by torrents that offer software like FCP for free, but this is where the problem begins.
Security researchers have found and reported about a new malware that is being circulated exactly this way. But the most concerning bit is—it went undetected all this while.
Jamf Threat Labs reports that it was scanning for routine checks when it found XMRig—a command-line crypto mining tool. But the problem isn’t the tool, and is often used for legitimate reasons; instead, the fact that it is open-source and adaptable, has made it hackers’ favourite. It found that this tool was being disguised along with Final Cut Pro X, and that the app contains a modification that was unauthorized by Apple.
The report adds that this makes Macs vulnerable to threats like cryptojacking, and this is especially more lucrative for hackers considering Macs now ship with powerful M-series processors—giving these tools much-needed firepower to execute crypto mining.
The infected version of the software was found in the Final Cut Pro version torrent on the Pirate Bay website, and one uploader in particular—wtfisthat34698409672, who has been uploading cracked Mac software for years now, is the one who was majorly responsible for putting out this malware in FCP and other popular software like LogicPro and more.
“Furthermore, we found that virtually every one of the dozens of uploads that began in 2019 was compromised with a malicious payload to surreptitiously mine cryptocurrency,” the researchers said.
It was also found that the malware is quite smart in the sense: “If it finds the Activity Monitor, it immediately terminates all of its malicious processes.” It added: “As a result, if the victim notices that their CPU is running hotter than normal while unwittingly mining crypto for the attacker and opens the Activity Monitor to confirm their suspicion, the malware stops its activity and hides until the next time the victim launches the application.”
How To Be Safe?
If you’re contemplating saving money by opting for pirated software and downloading cracked versions, be aware that hackers may attempt to infect your Mac with malware. It’s essential to invest in the software you need rather than resorting to free downloads—this not only harms developers and yourself but, most importantly, is unlawful.
Moreover, this isn’t the first instance of malware being discovered in pirated software—it has been prevalent since the advent of torrents. Your safest option is to steer clear of all types of torrents. Ensure that you purchase your software from legitimate websites, preferably directly from the company that develops it. And, if you’ve previously used pirated software, make sure to uninstall it. Additionally, change your device and account passwords for enhanced security and peace of mind.
Comments
0 comment