However, the presence of any of the files above is an indication that your system has been infected by the trojanized application, which means OSX/Proton is likely to be hoovering up a wide range of valuable personal data, including operating system details, browser information such as cookies and bookmarks, cryprocurrency wallets, SSH private data, macOS keychain data, VPN configuration, and password data.Īs with any compromised administrator account, ESET said a full OS reinstall is the only sure way to get rid of the malware. Eltima said the trojan package only affected users who downloaded the software on October 19 – and only then when done so directly from its own website. “If any of them exists, it means the trojanized Elmedia Player or Folx application was executed and that OSX/Proton is most likely running,” ESET stated.įortunately, the window of infection is relatively small. The backdoor attack was confirmed on October 19, and Eltima published an announcement detailing the event shortly after.ĮSET said it advises anyone who recently downloaded Elmedia Player – or the company’s Folx download manager and torrent client – to verify if their system has been compromised by testing for the presence of any of the following file or directory: Mac users who recently downloaded Elmedia Player onto their devices may have unwittingly exposed their system details, cryptocurrency wallets, and password data, after it emerged hackers had injected malware into the popular freeware video player.Īccording to research published by the ESET security community, Eltima, the makers of Elmedia Player, have been distributing a version of their application trojanized with the OSX/Proton malware. Affected users urged to conduct complete OS reinstall
0 kommentar(er)
