TF-MAL-osx.keranger
📛 Threat Title
Malware family: KeRanger
Description
ThreatFox malware family `osx.keranger`. Printable name: KeRanger.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
osx.keranger
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/osx.keranger
IOC database
- Type
- domain
- Value
osx.keranger- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-osx.keranger
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/osx.keranger
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (9)
-
web:corelock.net
Is KeRanger on your Mac? Learn the signs of infection, step-by-step removal, and how to prevent it. Free scan with CoreLock.
-
web:en.wikipedia.org
KeRanger (also known as OSX. KeRanger .A) is a ransomware trojan horse targeting computers running macOS. Discovered on March 4, 2016, by Palo Alto Networks, it affected more than 7,000 Mac users.
-
web:macsecurity.net
Remove KeRanger , the first known ransomware crafted for Mac OS X, learn how to avoid this assault and restore the files encrypted by this infection.
-
web:www.anavem.com
KB890830 delivers the March 2026 update for Windows Malicious Software Removal Tool (MSRT), adding detection and removal capabilities for 47 new malware families including advanced ransomware variants and AI-powered threats targeting Windows 10, Windows 11, and Windows Server systems.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.kiteworks.com
CVE-2026-42897 is the 19th Exchange CVE on CISA's KEV catalog in five years. Here is what the pattern means for sensitive email architecture in 2026 and beyond.
-
web:www.malwarebytes.com
The copy of the app was infected to include Ransom.OSX. KeRanger . Protection Malwarebytes for Mac detects and removes Ransom.OSX. KeRanger Remediation Malwarebytes for Mac will detect and remove the components of this ransomware. Download and install the latest version of Malwarebytes for Mac. Click the "Scan Now" button to perform a system scan.
-
web:www.pcrisk.com
KeRanger Ransomware Removal Instructions KeRanger is ransomware-type malware that stealthily infiltrates systems and then encrypts stored files. Distributed via the Transmission BitTorrent client, KeRanger is the first ransomware that successfully works on the Mac OSX operating system. What is KeRanger Ransomware?
-
web:www.reactionarytimes.com
This content discusses the emergence of KeRanger ransomware, the first crypto-ransomware targeting Mac OS X, and provides tips for protecting oneself against it.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.