Both the HandBrake website and the copy of HandBrake available via Homebrew (a command-line software installation system) were affected.
This issue was discovered and the malicious app was removed on May 6, also a security warning was posted on the HandBrake website. The real HandBrake 1.0.7 app was replaced with a malicious copy on May 2. Now, the same thing has happened to the popular DVD-ripping HandBrake app, which is installing a new variant of the Proton malware. Last year, the Transmission torrent app was hacked not just once, but twice, to install the KeRanger ransomware and, later, the Keydnap backdoor.
