Beshington

Q: If a mac has bootcamp can ransomwareaffect the OSX partion?

IF lets say an

Refurbished 13.3-inch MacBook Pro 2.5GHz Dual-core Intel i5

running Yosemite has a BootCamp partition running Windows 10, And the Windows 10 partition gets some type of Ransomware, Like Cryptolocker

and was locked down and encrypted would it effect the MacOS partition?

 

I have been running Windows in a VM but it is too slow so I am thinking about BootCamp.

MacBook Pro, OS X Yosemite (10.10.3), Windows

Posted on Jun 24, 2016 11:40 AM

Close

Q: If a mac has bootcamp can ransomwareaffect the OSX partion?

  • All replies
  • Helpful answers

  • by Niel,

    Niel Niel Jun 24, 2016 1:49 PM in response to Beshington
    Level 10 (311,758 points)
    Jun 24, 2016 1:49 PM in response to Beshington

    No. Unless specific additional software is installed into Windows, the Mac OS X partition will be read-only.

     

    (143100)

  • by Loner T,

    Loner T Loner T Jun 24, 2016 8:05 PM in response to Beshington
    Level 7 (23,598 points)
    Safari
    Jun 24, 2016 8:05 PM in response to Beshington

    I have seen two instances of ransomware which carried a read-write HFS+ driver and caused havoc. This specific driver was derived from OpenSource linux variants (Ubuntu, Fedora) and ported to Windows.

     

    There is nothing on the horizon yet, that currently has a CoreStorage OS X driver for Windows.

     

    I suggest either using OS X FileVault2 to encrypt the OS X side, or converting the OS X HFS+ volumes to CS LVG/LVs and avoid future issues.

     

    Good backups for both OSes should be user first line of defense, where you can wipe and/or replace the internal disk/flash and bring sanity to the Mac.