Pop-up window: Apple wants to make changes

Have you tried running Malwarebytes?

Have you tried running Malwarebytes?

I installed Malware bytes today. Have not had the annoying pop-up. I'll post if it returns.

Same here...ran it last week and quarantined then removed. All good here! Yes, Adobe flash player download carried the hitchhiker.

Around here we have found that malwarebytes is the only app of this nature we recommend. We recommend getting rid of all others.

R

Malwarebytes for Mac — Mac Antivirus Replacement | Malwarebytes

Followed your instructions, found 'Citrix Online Web Deployment Plugin 1.0.0.105'. Looks like it is something related to GoToMeeting, GoToWebinar etc. Not sure if it is the culprit but the only other Plug-ins are Adobe Reader adn SharePoint Browser which I use for work.

Whatever is producing this message has nothing to do with Apple. The OS already has 100% control over the system, all the way down to root level. It doesn't need the user's permission to do anything, or even ask.

This just happened to me also after visiting Axios website, or it may have been from one of it's links. I clicked the close button and it popped again. This time I did the "Command Esc" and saw a small blank document icon with a "P" next to it. When I did the force quit that took care of it.

I though we determined it was fake. I don't think that is the wording used in macOS.

Dang, now I'm not sure. The messages change depending on what you're installing. Here's what I got in Mojave while installing a Flash Player update.

Nothing about "Type your password to allow this.", and a different confirmation button. With this admin box open, I ran Activity Monitor to see what was generating the message.

According to that, the OS was genuinely creating the box via the SystemAppearance drawing routines. But then, the scam app could easily be calling for the same resources. I have no way of checking without having the malware to run.

It would seem to me the OS is indeed calling for the admin confirmation, prompted by the malware. Otherwise, why show it at all? Any malware would prefer you didn't even know it was installed. This only draws your attention to it and they have to goad the user into allowing its full installation in order to do what the malware app intends.

Whichever is correct, we definitely know users shouldn't allow it.

I'd recommend checking your apps if you have small kids. They download games off the internet. ex. club penguin, runescape, something called Jangoram is a big problem that keeps coming back after I find that these games have been installed. They hide malicious software in these apps that take over your browser.

Have you tried disconnecting from internet services and then allowing the change? Were there any updates recently since this started popping up? Have you restarted the device?

Experienced the same issue, per apple support recommendation downloaded Malwarebytes, here are results..

I called Apple Support today, 9/13/18. They said it's ok and to type password. I had just uninstalled Norton Security because I realized I didn't need it. The weird thing was though, the popup came after it UNinstalled and my computer restarted. Apple Support said it was ok. I hope they are right. They helped me install Malwarebytes as well at my request.