
The legit installer (HandBrake-1.0.7.dmg) was apparently replaced with another file on May 2nd that contained an Apple Trojan called OSX.PROTON. Anyone who downloaded the app during that time is advised to do a little detective work to find out if they were infected.

The affected domain () has been shut down pending an investigation. The maintainers of HandBrake report (Opens in a new window) that one of the two download mirrors it uses was affected, but the main Handbrake website and mirror was not. Anyone who downloaded the macOS version of HandBrake during that time may have picked up a nasty Trojan.

Users of the software were alerted recently that one of HandBrake's download mirrors was infiltrated between May 2nd and 6th. However, it was also recently compromised by malware. HandBrake is an extremely popular piece of video transcoding software because it's cross-platform, open source, and free.
