WHAT HAPPENED?
There have been reports of a new Mac malware in the wild that allows attackers full access of infected Mac systems.


WHEN DID IT HAPPEN?
First reported Wednesday, July 6, 2016.


WHY DID IT HAPPEN?
An application called EasyDoc Converter was available for download on some reputable Apple software download websites, but was never available through the Mac App Store.  Once installed, it creates a backdoor and downloads an additional malicious script that allows for full access of the system.  The app isn't signed by Apple, so the Gatekeeper tool enabled by default in MacOS should protect the majority of users.  More information can be found here: https://blog.malwarebytes.com/cybercrime/2016/07/new-mac-backdoor-malware-eleanor/


WHAT DO YOU NEED TO DO?
As always, TSO recommends caution when installing software, especially unsigned applications.  If you think you've been affected by this attack, please contact the TSO help desk immediately for assistance.


WHO SHOULD YOU CONTACT FOR QUESTIONS?
Feel free to contact the TSO Help Desk (CCB 148, 404-894-7065, helpdesk@cc.gatech.edu).