From: Jules Mike Giovanni <johnally_at_eml.cc>
Date: Wed, 09 Mar 2016 03:56:48 -0800
Hi SM,
Apple has taken some steps by informing users if they are infected. The
ransomware (i.e KeRanger) goes dormant for three(3) days after infection
and then starts its malicious business. An article[1] on lifehacker
explains how to remove the ransomware but I think the encrypted files
are lost.