MITRE ATT&CKsoftware (malware)

S0279 Proton

Published 2018-10-17 Modified 2025-04-25 Official page ↗
Domain
enterprise
Platforms
macOS
Version
1.2
Created
2018-10-17

Description

Proton is a macOS backdoor focusing on data theft and credential access .

Related

Uses · MITRE ATT&CK (15)

  • T1685 Disable or Modify Tools technique
  • T1685.006 Clear Linux or Mac System Logs sub-technique
  • T1555.005 Password Managers sub-technique
  • T1059.004 Unix Shell sub-technique
  • T1560 Archive Collected Data technique
  • T1555.001 Keychain sub-technique
  • T1555.003 Credentials from Web Browsers sub-technique
  • T1021.005 VNC sub-technique
  • T1056.001 Keylogging sub-technique
  • T1056.002 GUI Input Capture sub-technique
  • T1070.004 File Deletion sub-technique
  • T1548.003 Sudo and Sudo Caching sub-technique
  • T1543.001 Launch Agent sub-technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1113 Screen Capture technique

References