{"id":320635,"date":"2017-05-19T06:36:23","date_gmt":"2017-05-19T06:36:23","guid":{"rendered":"http:\/\/citifmonline.com\/?p=320635"},"modified":"2017-05-19T06:36:23","modified_gmt":"2017-05-19T06:36:23","slug":"app-makers-code-stolen-in-malware-attack","status":"publish","type":"post","link":"https:\/\/citifmonline.com\/?p=320635","title":{"rendered":"App maker&#8217;s code stolen in malware attack"},"content":{"rendered":"<p class=\"story-body__introduction\">The Mac and iOS software developer Panic has had the source code for several of its apps stolen.<\/p>\n<p>Panic founder Steven Frank admitted in a blog post that it happened after he downloaded an infected copy of the video encoding tool Handbrake.<\/p>\n<p>He said there was no sign that any customer data was accessed and that Panic&#8217;s web server was not affected.<\/p>\n<p>Users have been warned to download Panic&#8217;s apps only from its website or the Apple App Store.<\/p>\n<p>Panic is the creator of web editing and file transfer apps Coda and Transmit, and the video game Firewatch.<\/p>\n<p class=\"story-body__crosshead\"><strong>&#8216;Entirely compromised&#8217;<\/strong><\/p>\n<p>On 2 May Handbrake was hacked, with the Mac version of the app on one of the site&#8217;s download servers replaced by a malicious copy.<\/p>\n<p>The infected app was discovered and removed on 6 May.<\/p>\n<p>In what Mr Frank called &#8220;a case of extraordinarily bad luck&#8221;, he downloaded the malicious version of Handbrake and launched it &#8220;without stopping to wonder why Handbrake would need admin privileges\u2026 when it hadn&#8217;t before&#8221;.<\/p>\n<p>&#8220;And that was that, my Mac was completely, entirely compromised in three seconds or less.&#8221;<\/p>\n<p>The attacker then used his password to access other private files and copy the source code for several of Panic&#8217;s products stored on the infected computer.<\/p>\n<p class=\"story-body__crosshead\"><strong>Ransom demand<\/strong><\/p>\n<p>The theft was confirmed when Panic received an email containing some of the files and demanding a ransom for the return of the complete code.<\/p>\n<p>&#8220;We&#8217;re working on the assumption that there&#8217;s no point in paying,&#8221; Mr Frank wrote, saying that &#8220;the attacker has no reason to keep their end of the bargain&#8221;.<\/p>\n<p>The FBI is investigating the incident and Panic has been working with Apple to make sure that no malicious or fake versions of the apps get into the App Store.<\/p>\n<p>&#8220;I feel like a monumental idiot for having fallen for this,&#8221; Mr Frank admitted.<\/p>\n<p>&#8220;It&#8217;s a good reminder though \u2014 no matter how experienced you might be with computers, you&#8217;re human and mistakes are easily made.&#8221;<\/p>\n<p>&#8211;<\/p>\n<p>Source: BBC<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Mac and iOS software developer Panic has had the source code for several of its apps stolen. Panic founder Steven Frank admitted in a blog post that it happened after he downloaded an infected copy of the video encoding tool Handbrake. He said there was no sign that any customer data was accessed and [&hellip;]<\/p>\n","protected":false},"author":14,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jnews-multi-image_gallery":[],"jnews_single_post":[],"jnews_primary_category":[],"jnews_social_meta":[],"jnews_override_counter":[],"footnotes":""},"categories":[106],"tags":[6215,7083],"class_list":["post-320635","post","type-post","status-publish","format-standard","hentry","category-technology","tag-hacking","tag-malware"],"_links":{"self":[{"href":"https:\/\/citifmonline.com\/index.php?rest_route=\/wp\/v2\/posts\/320635","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/citifmonline.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/citifmonline.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/citifmonline.com\/index.php?rest_route=\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/citifmonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=320635"}],"version-history":[{"count":0,"href":"https:\/\/citifmonline.com\/index.php?rest_route=\/wp\/v2\/posts\/320635\/revisions"}],"wp:attachment":[{"href":"https:\/\/citifmonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=320635"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/citifmonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=320635"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/citifmonline.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=320635"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}