First Mac ransomware had sights on encrypting backups, too

The first known working ransomware aimed at Macs contained hints that the cybercriminals were working on a way to encrypt backups in an attempt to force payment, security researchers said today.
Dubbed "KeRanger" by Palo Alto Networks, whose researchers discovered the malware on Friday, the attack code included a non-working "stub" function labeled "_encrypt_timemachine."
"We believe that they had plans to finish [the function] at some point," said Ryan Olson, director of threat intelligence, U