RansomWhere? For Mac

RansomWhere? is an unobtrusive solution aimed to deal with ransomware attempts on macOS: the app runs in the background, as a service, and displays alerts whenever it detects a process encrypting files on your Mac.

For your convenience, RansomWhere? comes with both installation and uninstallation tools, that you can access via the app’s main panel. You get to reset the app’s configuration via the command line (make sure to visit the RansomWhere? website for details).

Note that once deployed, RansomWhere? does not make its presence known except when displaying alerts. To gain access to the RansomWhere? main panel, simply launch the application again.

RansomWhere? will run in the background at all times and lets you know whenever a process encrypts a file on your Mac. You get to see the process name and the files that are encrypted, together with their full path.

Whenever RansomWhere? triggers an alert, the process is automatically stopped, and you get to review the details and decide if you allow the procedure to continue or not. This is necessary because RansomWhere? might trigger false alerts.

RansomWhere? evaluates each process in order to determine if its trusted and if it quickly encrypts files, but allows the user to make the ultimate decision.

To avoid repetitive actions, RansomWhere? will remember the processes that are allowed to continue by the user and add them to the trusted list.

At the same time, note that it might take some time before RansomWhere? triggers the alarm, which means that two or three files might end up encrypted by some ransomware after all. However, the majority of your data should be protected.

To sum up, RansomWhere? offers you the possibility to put up an additional security level and avoid falling prey to ransomware attempts.

The RansomWhere? app runs as a service, lets you know whenever files are quickly encrypted on your system, and automatically blocks the process until it's reviewed by the user.