# Mac Client 6.4.6 Ransomware and failed FileVault encryptions

**URL:** <https://community.watchmanmonitoring.com/t/mac-client-6-4-6-ransomware-and-failed-filevault-encryptions/1757>\
**Category:** Mac OS Releases\
**Created:** [March 7, 2016, 12:17am UTC](https://community.watchmanmonitoring.com/t/mac-client-6-4-6-ransomware-and-failed-filevault-encryptions/1757 "2016-03-07T00:17:56Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![watchmanmonitor](https://community.watchmanmonitoring.com/user_avatar/community.watchmanmonitoring.com/watchmanmonitor/32/303_2.png) [@watchmanmonitor](https://community.watchmanmonitoring.com/u/watchmanmonitor)\
**Post date:** [March 7, 2016, 12:17am UTC](https://community.watchmanmonitoring.com/t/mac-client-6-4-6-ransomware-and-failed-filevault-encryptions/1757/1 "2016-03-07T00:17:56Z")

</div>

###Feature

- Detection of a newly reported KeRanger Mac ransomeware variant.
- Better detection of stalled FileVault Encryption attempts

###Changes

- Minor bug fixes and clarification for Carbon Copy Cloner, SMART and internal IP address plugins.

This build will track dormant copies of the KeRanger. Learn more about this new threat in a post [by Palo Alto Networks.](http://researchcenter.paloaltonetworks.com/2016/03/new-os-x-ransomware-keranger-infected-transmission-bittorrent-client-installer/)

[https://www.watchmanmonitoring.com/mac-client-6-4-6-ransomware-failed-filevault-encryptions/](https://www.watchmanmonitoring.com/mac-client-6-4-6-ransomware-failed-filevault-encryptions/)