Q: Mysterious app has appeared on my Mac Book Pro and it appears very malicious
Hi All,
I have a Macbook Pro (Retina, 13-inch, Late 2013) using OS El Capitan 10.11.6 (15G1004)
Firstly the attached item is the installer file referenced below with the executables removed. I still have these where I found them until further advice is found out.
Context - it is incredibly likely that a number of senior managers in my office are about to act unconscionably towards a very large company deposit. This explains my panic at the situation described below.
Problem - a strange "installation" app appeared in my downloads folder recently. I am not a prolific downloader and when I do access downloads, i access them in safari rather than finder as a rule. I do however check the folder often enough to sort and dispose of anything that is junk. This stood out like a sore thumb so it hasn't been there long.
Im not stupid enough to click on email links or files from people I don't know. The name of the installer is the banking institution where the said fraud is going to take place. I know I can simply delete it and its gone away - but I can't do this as:
a) I don't know if the app is connected to the possible fraud and I am being implicated using this method to compromise my personal mac
b) I don't know if the app has "installed" something already
c) I need to know what that something is, and how to record it and preserve it should it have implicated me in their fast approaching scam deadline.
I stumbled across this scheme by accident - I'm very unsettled and am taking the steps to report it. I need some help knowing what this app is about and throwing it out to the community in the hope that you can easily read what my brain can't make sense of - the sh and plist files attached (no executables). https://www.dropbox.com/s/fx5y19po1ha3knm/Strange%20Installer%20file%20-%20no%20 executables.zip?dl=0
Thanking you in advance.
EJ
MacBook Pro with Retina display, OS X El Capitan (10.11.6)
Posted on Sep 13, 2016 4:17 PM