Skip to main content

The biggest cybercriminals on the internet are now targeting Macs

The cybercriminal gang LockBit has now set its sights on Apple products with the development of its first ransomware for Macs, according to 9to5 Mac.

The Security research group MalwareHunterTeam (via Brett Callow) recently discovered that LockBit appears to have developed a ransomware build that is compatible specifically with macOS. The never-before-seen ransomware might be a first for LockBit, as the gang typically develops on Windows, Linux, and virtual host machines, the publication added.

A stack of MacBooks is pictured from the top down.
Image used with permission by copyright holder

The Mac-specific ransomware seems to target Apple Silicon Macs and is listed on the web under the build name locker_Apple_M1_64, according to researchers.

Another older Twitter account called vx-underground shows mention of the LockBit ransomware around November 2022, however, MalwareHunterTeam and other researchers note that there seems to be no real indication of the existence of locker_Apple_M1_64 until nowThis current account might be the first public notice that Apple devices are at risk of being affected by ransomware. The research group notes that now that news of the ransomware is out in the open, Macs might be more susceptible to cyberattacks.

LockBit is a notoriously powerful gang on the web, and is known by security analysts as a Russian-based group. Even so, the group leader is believed to operate out of the U.S. or China. The cybercriminal gang is a ransomware-as-a-service (RaaS) operation that allows others to purchase their nefarious products for their own unsavory tasks, 9to5 Mac noted.

Not a single person I can find tweeted LockBit has a Mac targeting version before I did above yesterday, nor can find any blog posts mentioning it, etc. So even if the gang had the first build in 2022 November, for public, this is not late at all, but even yet, seems the first… pic.twitter.com/4iR71cuLpo

— MalwareHunterTeam (@malwrhunterteam) April 16, 2023

The group is already known for its custom ransomware exfiltration tool called StealBIT, and is also known for quickly updating and preparing its infrastructure to keep on top of the cybercriminal food chain, Kaspersky’s Global Research senior security researcher Dmitry Galov said in a statement last year.

Expanding its reach to Apple products might just be an indication of how powerful the ransomware group has become.

Jon DiMaggio from Analyst1 similarly told Wired earlier this year that LockBit’s leader treats the RaaS group very much like a business, with point-and-click access, frequent updates, concern about user feedback, and frequent recruitment from rival gangs to maintain the quality of the ransomware.

Editors' Recommendations

Fionna Agomuoh
Fionna Agomuoh is a technology journalist with over a decade of experience writing about various consumer electronics topics…
If you buy one MacBook Air alternative, make it this one
The MacBook Air on a white table.

I see you. You're considering a flashy new MacBook Air -- perhaps one of the new M3 models or even the cheaper M2 configurations. I'm not going to sit here and pretend like that isn't a wise option to consider for your next laptop. These are excellent laptops, and that M2 model in particular is a solid value at a starting price of $999.

But let me make an appeal to you about a laptop that upends the value proposition of the MacBook Air in a number of ways. The laptop I'm talking about is the Asus Zenbook 14 OLED (Q425MA). This is a laptop we reviewed earlier this year, but it continues to be the king of value. No other laptop you can buy right now offers this much bang for your buck -- the MacBook Air included.

Read more
The biggest threat to the MacBook this year might come from Apple itself
The MacBook Air on a white table.

MacBooks have held a dominant position in the laptop world for the past few years. Though there have been meaningful rivals from the Windows side of the aisle, the MacBook Air and MacBook Pro still feel like they hold an unshakeable lead at the moment.

But according to the latest reports, the most serious challenger to the MacBook's reign won't come from Windows -- it'll come from within Apple in the form of some very advanced new iPads.
What's a computer?

Read more
I was wrong about using Stage Manager on Mac
Stage manager in macOS Ventura.

Stage Manager is one of those software features that has had a rather bumpy road since Apple launched it in 2022. The unique multitasking feature has landed itself in a heap of criticism over its short lifespan.

I, however, was not one of these critics. I was super excited by Stage Manager and the promise it contained. It was something new and shiny, here to shake up macOS in a fresh and different way. Even after using it myself, I foresaw it fundamentally changing the way I used my Mac.

Read more