If you use the popular video transcoder Handbrake on a Mac, the distributors want you to check the download hash after one of their mirrors was compromised.

Users who downloaded a trojan-infected version of Handbrake will need to change all their KeyChain passwords (lovely), and any passwords they stored in their browsers.

The announcement is in this note posted to the application's forums on Saturday.

The distributors say they're still investigating the compromise, which happened between 2 May 2017 (14:30 UTC) and 6 May 2017 (11:00 UTC).

“Anyone who has installed HandBrake for Mac needs to verify their system is not infected with a Trojan. You have 50/50 chance if you've downloaded HandBrake during this period,” the note states. Windows users aren't affected.

[theregister.co.uk...]

A number of MAC webmasters do video and some might use Handbrake. This is a serious warning if you've updated or patched Handbrake this month.