OSX.Proton is Malwarebytes' detection name for a Trojan dropper that exfiltrates private information from macOS systems.
OSX.Proton will add a line to the sudoers file, which manages access to root privileges:
Defaults !tty_tickets
Since OSX.Proton is designed to steal login credentials, you will need to take some emergency actions post-infection. You should treat all online passwords as compromised and change them all.
Download and install the latest version of Malwarebytes for Mac.
Click the “Scan Now” button to perform a system scan.
If threats are detected during the scan, a count of detected threats is displayed. More detailed threat information is displayed after the scan completes.
Click “Confirm” to move the detected threats to Quarantaine.
If a restart is required to complete remediation of threats detected during a scan, you will be notified. When a restart is required, please remember to save all work before clicking “Restart”.
Select your language