Who was affected? Mac users who downloaded Handbrake version 1.0.7 between May 2 and May 6 may have received an infected download. This version, though, seems focused on password theft. Proton often has many other features embedded as well, like keylogging. Since you already gave up your admin password, it’s safe to assume they can access all the other sensitive data stolen from your Mac. passwords, credit card numbers), and even the secure vaults for password managers. This data includes keychains, the saved form data of your web browser (i.e.

Once fully installed, it immediately searches out sensitive user information to send to its home server. If supplied, the hackers controlling the malware received the password immediately. Users of the infected installer saw a prompt that requested their Mac admin password. For four days, an unknown quantity of users downloaded and installed an unwelcome addition - a powerful malware package known as Proton. Unfortunately, hackers recently compromised one of Handbrake’s download servers. Most people use the popular software, Handbrake, to digitize their media. People with an extensive DVD or Blu-Ray collection can enjoy a wide variety of media at home, but what happens when you want to take it with you? The simple solution is to “rip” your favorite DVDs to create digital media files you can play back on your MacBook, or perhaps store on your home media server. Compromised Download Server Infects Handbrake Users with Malware

Handbrake macbook