# Proton > Tipo: **malware** · S0279 · [MITRE ATT&CK](https://attack.mitre.org/software/S0279) ## Descrição [[s0279-proton|Proton]] é um backdoor para macOS focado em roubo de dados e acesso a credenciais. **Plataformas:** macOS ## Técnicas Utilizadas - [[t1056-002-gui-input-capture|T1056.002 - GUI Input Capture]] - [[t1543-001-launch-agent|T1543.001 - Launch Agent]] - [[t1070-004-file-deletion|T1070.004 - File Deletion]] - [[t1021-005-vnc|T1021.005 - VNC]] - [[t1548-003-sudo-and-sudo-caching|T1548.003 - Sudo and Sudo Caching]] - [[t1555-001-keychain|T1555.001 - Keychain]] - [[t1140-deobfuscatedecode-files-or-information|T1140 - Deobfuscaté/Decode Files or Information]] - [[t1555-003-credentials-from-web-browsers|T1555.003 - Credentials from Web Browsers]] - [[t1056-001-keylogging|T1056.001 - Keylogging]] - [[t1555-005-password-managers|T1555.005 - Password Managers]] - [[t1070-002-clear-linux-or-mac-system-logs|T1070.002 - Clear Linux or Mac System Logs]] - [[t1113-screen-capture|T1113 - Screen Capture]] - [[t1560-archive-collected-data|T1560 - Archive Collected Data]] - [[t1059-004-unix-shell|T1059.004 - Unix Shell]] - [[t1562-001-disable-or-modify-tools|T1562.001 - Disable or Modify Tools]] ## Referências - [MITRE ATT&CK - S0279](https://attack.mitre.org/software/S0279)