Phishing Scam or cause for Concern Rdp / Keylogger

Here is the report

EtreCheck version: 4.3.5 (4D039)

Report generated: 2018-07-15 18:40:23

Download EtreCheck from https://etrecheck.com

Runtime: 3:42

Performance: Good

Problem: Other problem

Description:

Phishing Email

Major Issues: None

Minor Issues:

These issues do not need immediate attention but they may indicate future problems.

Upgradeable RAM - This machine has upgradeable RAM that would help its performance.

Unsigned files - There are unsigned software file installed. They appear to be legitimate but should be reviewed.

32-bit Apps - This machine has 32-bits apps that may have problems in the future.

Hardware Information:

MacBook Pro (13-inch, Mid 2012)

MacBook Pro Model: MacBookPro9,2

1 2.5 GHz Intel Core i5 (i5-3210M) CPU: 2-core

4 GB RAM - Upgradeable

BANK 0/DIMM0 - 2 GB DDR3 1600 ok

BANK 1/DIMM0 - 2 GB DDR3 1600 ok

Battery: Health = Normal - Cycle count = 273

Video Information:

Intel HD Graphics 4000 - VRAM: 1536 MB

Color LCD 1280 x 800

Drives:

disk0 - Samsung SSD 850 EVO 500GB 500.11 GB (Solid State - TRIM: No)

Internal SATA 6 Gigabit Serial ATA

disk0s1 - EFI (MS-DOS FAT32) [EFI] 210 MB

disk0s2 499.90 GB

disk1s1 - Macintosh HD (APFS) 499.90 GB (345.65 GB used)

disk1s2 - Preboot (APFS) [APFS Preboot] 499.90 GB (22 MB used)

disk1s3 - Recovery (APFS) [Recovery] 499.90 GB (518 MB used)

disk1s4 - VM (APFS) [APFS VM] 499.90 GB (2.15 GB used)

disk2 - Seagate Backup+ BK 1.00 TB

External USB 5 Gbit/s

disk2s1 [EFI] 210 MB

disk2s2 - T*******************p (Journaled HFS+) 999.86 GB

Mounted Volumes:

disk1s1 - Macintosh HD 499.90 GB (151.40 GB free)

APFS

Mount point: /

Encrypted

disk1s4 - VM [APFS VM] 499.90 GB (151.40 GB free)

APFS

Mount point: /private/var/vm

disk2s2 - T*******************p 999.86 GB (997.86 GB free)

Journaled HFS+

Mount point: /Volumes/T*******************p

Network:

Interface en0: Ethernet

Interface fw0: FireWire

Interface en1: Wi-Fi

802.11 a/b/g/n

One IPv4 address

Interface en4: iPhone

Interface en3: Bluetooth PAN

Interface bridge0: Thunderbolt Bridge

iCloud Status: 3 pending files

System Software:

macOS High Sierra 10.13.5 (17F77)

Time since boot: About an hour

System Load: 1.83 (1 min ago) 1.71 (5 min ago) 1.82 (15 min ago)

Security:

Unsigned Files:

Launchd: /Library/LaunchAgents/com.oracle.java.Java-Updater.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Java Updater.app/Contents/MacOS/Java Updater -bgcheck

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist

Executable: /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Resources/Helper-Tool

Details: Exact match found in the whitelist - probably OK

Launchd: /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist

Executable: /Library/PrivilegedHelperTools/com.microsoft.office.licensing.helper

Details: Exact match found in the whitelist - probably OK

Launchd: ~/Library/LaunchAgents/com.microsoft.LaunchAgent.SyncServicesAgent.plist

Executable: /Applications/Microsoft Office 2011/Office/SyncServicesAgent.app/Contents/MacOS/SyncServicesAgent

Details: Exact match found in the whitelist - probably OK

32-bit Applications:

35 32-bit apps

System Launch Agents:

System Launch Daemons:

Launch Agents:

Launch Daemons:

User Launch Agents:

User Login Items:

iTunesHelper Application (Apple - installed 2018-07-10)

(/Applications/iTunes.app/Contents/MacOS/iTunesHelper.app)

Dropbox Application (Dropbox, Inc. - installed 2018-07-15)

(/Applications/Dropbox.app)

Internet Plug-ins:

FlashPlayer-10.6: (installed 2018-07-10)

QuickTime Plugin: (installed 2018-06-18)

AdobePDFViewerNPAPI: (installed 2018-07-13)

AdobePDFViewer: (installed 2018-07-13)

o1dbrowserplugin: (installed 2015-12-17)

Flash Player: (installed 2018-07-10)

SharePointBrowserPlugin: (installed 2017-09-13)

googletalkbrowserplugin: (installed 2015-12-11)

MeetingJoinPlugin: (installed 2013-09-02)

JavaAppletPlugin: (installed 2014-04-16)

User Internet Plug-ins:

CitrixOnlineWebDeploymentPlugin: (installed 2013-04-26)

Safari Extensions:

3rd Party Preference Panes:

Flash Player (installed 2018-06-25)

Java (installed 2014-04-16)

Time Machine:

Skip System Files: No

Mobile backups: Yes

Auto backup: Yes

Volumes being backed up:

Macintosh HD: Disk size: 499.90 GB - Disk used: 348.50 GB

Destinations:

T*******************p [Local] (Last used)

Total size: 999.86 GB

Total number of backups: 59

Oldest backup: 2017-09-01 23:20:28

Last backup: 2018-07-12 08:16:44

Top Processes by CPU:

Top Processes by Memory:

Top Processes by Network Use:

Top Processes by Energy Use:

Virtual Memory Information:

Software Installs (past 30 days):

Diagnostics Information (past 7 days):

2018-07-15 17:19:33 bluetoothd Crash

/usr/sbin/bluetoothd

2018-07-13 09:21:59 Microsoft Outlook.app Hang

/Applications/Microsoft Outlook.app

2018-07-09 16:07:19 com.apple.WebKit.WebContent CPU

/System/Library/Frameworks/WebKit.framework/Versions/A/XPCServices/com.apple.Web Kit.WebContent.xpc/Contents/MacOS/com.apple.WebKit.WebContent

End of report

Hi,

It appears to be a Phishing scam. I ignored it and nothing happened. I have had 5 similar emails since which now go to my junk.

According to police feedback It is likely that my email / Pw combo was hacked from a breach to LinkedIn or some other site and these emails are exploiting that. However I can not be 100% certain as the same pw was used for my Mac . I am making sure that passwords are unique now.

Everything seems ok tho. If I get another email like that with my new Mac pw then I will know I have a teal issue tho.

I would be interested to know if the email you got had your Mac password or a password from another site/ service that you used to login with?

Thanks,

downloaded Malwarebytes and ran scan. Says everything is clean and No Threats Found.

I can be confident that everythings ok then (as far as MAC is concerned) ?