Apple/Mac OS X ransomware is a new form of dangerous Apple malware that blocks access to a computer system alike the original FBI virus we discovered in 2012 that primarily targets Windows Operating Systems, this new version discovered by Jerome Segura (the senior security researcher at Malwarebytes) utilizes JavaScript to hijack internet browsers such as Safari and Chrome on Mac OS X. The new form of Apple ransomware alike previous cryptoviruses restricts access to Mac OS X by masquerading as a government department such as the FBI Cyber Department and displays a full screen browser window that claims “All activities of this computer have been recorded. All your files are encrypted. Don’t try to unlock your computer! Your browser has been blocked due to at least one of the reasons specified below” and lists crimes involving Copyright and Related Rights Law violations, distribution of prohibited pornographic content, neglectful use of a personal computer, and more. The browser window from the alleged FBI Cyber Department, or other authority then claims the user must pay a fine using credit services such as Moneypak by GreenDot or see jail time. The fraudulent penalty fine can range anywhere from $100, $300, to $500.

The FBI Cyber Department virus and ransomware similar this new form of Mac/Apple malware are very dangerous for reasons concerning the invasion of privacy and crimes involving credit theft, extortion, and identity theft. Furthermore, the claims made on the lock-screen are fraudulent; even if you did break the law, a user is given due process in court in the United States. The FBI will not block access to your computer system, they will arrest you. Paying the fine will not remove the Apple FBI virus or any form of ransomware. This computer virus is is no way associated with the FBI or any government department. To remove Macintosh/Apple ransomware and other forms of similar malware please use the instructions further below (it’s quite simple).

When infected with this form of the FBI virus or any other form of similar Apple malware the browser window will direct to an unspecified website that may try to appear like fbi.gov, though the domain is not actually the FBI. It will also be difficult to exit the browser window. When attempting to exit the browser window using Safari, alerts may prompt that say “YOUR BROWSER HAS BEEN LOCKED. ALL PC DATA WILL BE DETAINED AND CRIMINAL PROCEDURES WILL BE INITIATED AGAINST YOU IF THE FINE WILL NOT BE PAID.” These fraudulent alert messages should be ignored.

This notification actually actually uses JavaScript code to create a loop of 150 iframes. This means, if you wish to get rid of this Mac FBI virus and other forms of browser-locking malware you can click to leave the page 150 times and the browser lock will be released. The amount of 150 iframes is actually considered low, but it can be assumed this was done to to promote the stability of the infected internet browsers, as these iframes are loaded one after another and very quickly across multiple internet browsers.

Other references and terms used to describe this Apple ransomware include the “Your browser has been locked virus,” Apple fbi virus, FBI Cyber Department virus, and more.

How does the Mac FBI virus (ransomware) infect a computer?

The Mac FBI virus and similar malware can be contracted by visiting compromised websites, mostly relating to media content such as torrents, streaming videos, pornography, and file sharing. The allegations brought by this Mac browser-lock virus may seem relative to the point of intrusion though this infection can also be introduced by other means.

How to remove Apple ransomware (Mac OS X)

The Mac FBI virus attacks popular internet browsers using the Macintosh Operating System, including Apple Safari and Google Chrome, though Chrome has updated their browser to defeat this infection (*Update Google Chrome to avoid this infection). Clearing browser data and disabling java on affected internet browsers will remove the browser lock, however disabling Java is not always recommended. This ransomware does not install additional malware or cause additional privacy invading issues. To remove the FBI virus from Mac computers and other forms of ransomware please use the instructions below:

Safari Internet Browser:

We highly recommend writing down the toll free number below in case you run into any issues or problems while following the instructions. Our techs will kindly assist you with any problems.

1. Open Safari. Select Safari from the top menu and click Reset Safari.

2. A screen will appear that says “Are you sure you want to reset Safari?” Make sure all items on the list are selected (history, reset top sites, etc.),  and click the Reset button.

For video instruction to remove Mac OS X ransomware please see below:

Helpful Links:

• Department of Justice Virus
• ICE virus
• Reoloadit virus