CALISTO DETECTED INSTALLING BACKDOOR ON MACOS
Calisto is a backdoor trojan for macOS believed to be a forerunner of the Proton family of malware.
Although Calisto is written in Swift, it uses a number of similar techniques to its Proton offspring. Notable is the choice of a fake AntiVirus product as an installer.
Whereas a recent Proton trojan picked on Symantec, Calisto targets Intego users instead.
Calisto appears to be able to run on macOS versions as far back as 10.9 Mavericks, but it’s behaviour varies depending on both the operating system version and the device’s settings.