App maker's code stolen in malware attack

App maker's code stolen in malware attack

The Mac and iOS software developer Panic has had the source code for several of its apps stolen.

Panic founder Steven Frank admitted in a blog post that it happened after he downloaded an infected copy of the video encoding tool Handbrake.

He said there was no sign that any customer data was accessed and that Panic's web server was not affected.

Users have been warned to download Panic's apps only from its website or the Apple App Store.

Panic is the creator of web editing and file transfer apps Coda and Transmit, and the video game Firewatch.


On 2 May Handbrake was hacked, with the Mac version of the app on one of the site's download servers replaced by a malicious copy.

The infected app was discovered and removed on 6 May.

In what Mr Frank called "a case of extraordinarily bad luck", he downloaded the malicious version of Handbrake and launched it "without stopping to wonder why Handbrake would need admin privileges when it hadn't before".

"And that was that, my Mac was completely, entirely compromised in three seconds or less."

The attacker then used his password to access other private files and copy the source code for several of Panic's products stored on the infected computer.

The theft was confirmed when Panic received an email containing some of the files and demanding a ransom for the return of the complete code.

"We're working on the assumption that there's no point in paying," Mr Frank wrote, saying that "the attacker has no reason to keep their end of the bargain".

App maker's code stolen in malware attack

The FBI is investigating the incident and Panic has been working with Apple to make sure that no malicious or fake versions of the apps get into the App Store.

"I feel like a monumental idiot for having fallen for this," Mr Frank admitted.

"It's a good reminder though no matter how experienced you might be with computers, you're human and mistakes are easily made."



Add Comment

all comments

  Other news

more
Manchester attack: CCTV shows bomber before arena blast

Manchester attack: CCTV shows bomber before arena blast..

27-May, 17:08

CCTV images showing suicide bomber Salman Abedi on the night he attacked...

South Africa: Jacob Zuma 'plans second home in Dubai'

South Africa: Jacob Zuma 'plans second home in Dubai'..

28-May, 06:43

South Africa's embattled president Jacob Zuma has been planning to set up...

Trump team brush off Kushner 'secret Russia line' questions

Trump team brush off Kushner 'secret Russia line' questions..

27-May, 18:01

Senior US advisers have refused to answer questions about Donald Trump's...

Iraq starts new assault on Islamic State group in Mosul

Iraq starts new assault on Islamic State group in Mosul..

27-May, 14:25

Iraqi security forces have launched a new assault on Islamic State (IS)...

South Africa reports drop in rhinos killed by poachers

South Africa reports drop in rhinos killed by poachers..

27-Feb, 09:00

South Africa says poachers killed 1,054 rhinos in the country last year,...

Ben Stiller Shares Stories From Meeting Refugees in Jordan

Ben Stiller Shares Stories From Meeting Refugees in Jordan..

08-Feb, 07:20

Actor and director Ben Stiller is using his star power to draw attention...

Dunkin' Donuts slaying suspect now on FBI's 'Most Wanted'

Dunkin' Donuts slaying suspect now on FBI's 'Most Wanted'..

18-Apr, 10:48

The FBI is adding a man wanted in his wife's stabbing death at the...

UN official calls for more work with disabled in North Korea

UN official calls for more work with disabled in North Korea..

08-May, 22:58

A United Nations official visiting North Korea called Monday for more...