[dayglored]

> This malware apparently is limited to encrypting only 128 files, so it's not much of a threat.

Are they joking?

All it takes is encrypting ONE file, if it's the right one, and a user could lose anything from a day's work to their business, depending on their backup strategy (or lack of one).

This is a clear and present threat, and I consider it quite serious.

Swordmaker, I greatly appreciate your posting this. I've got Mac users here at work that I will be talking to about this soon.

[Swordmaker]

All it takes is encrypting ONE file, if it's the right one, and a user could lose anything from a day's work to their business, depending on their backup strategy (or lack of one).

They cannot touch any system files. They cannot touch any Application files. That requires an administrator name and passcode. They cannot touch any Library files. Same thing. The only thing they can touch would be user files. They could, conceivably look for most recent files in the documents folder and encrypt the most recent 128 files there. That could be devastating for someone who is working on an important project who is not using Time Machine.

However, the encryption of 128 files is not going to hose most people's entire set of documents, photos, etc. It also would not effect any office that used a server that stored their documents on a centralized files system, unlike some of the Windows Ransomware attacks. It will affect only one user's files and even then only a limited number of those, even on a multi-user Mac.

So, in the respects of comparison, it isn't as much of a threat.