How do I get rid of it

phish:HTML/FakeLogin.SDP!MTB this showed up today

MacBook Pro 13″, macOS 15.4

Posted on Apr 24, 2025 12:28 PM

Reply
6 replies

Apr 24, 2025 1:38 PM in response to Mspinkladybug

Mspinkladybug wrote:

My virus scan found it how do I find out what files it hit the scan says quarantine nothing else

When AV software quarantines something it is moved to a quarantined folder. Check the users guide of your AV software to see where that quarantined folder is and you should be able to delete that file.


But to reinforce what Kurt Lang said you do not need AV on any of your Apple devices. Anything they find is almost always only affects Windows users. Malware designed for Windows simply won't execute on a Mac.


A simple Google search on that file results in Windows only related data so it doesn't affect your Mac at all.



Apr 24, 2025 1:56 PM in response to Mspinkladybug

Get rid of your virus scan.


It has been 25 years since macOS was first released to the public. In that quarter century there has never been a single virus that affected macOS. None. Zero. Nevertheless the "anti-virus" industry continues its grift, simultaneously exploiting and fomenting fear. It's a highly successful business model. You don't have to play that game.


By the way if that particular product (whatever it is) offered to "quarantine" an email message (if that's what it was) that action will corrupt Mail's database. Guaranteed. Then you will have real problems, not imaginary ones.

Apr 24, 2025 2:07 PM in response to Mspinkladybug

The easiest way to solve this is to remove the add-on anti-malware — maybe this is Microsoft Defender Antivirus, or a Defender end-point anti-malware product? — and use the built-in anti-malware integrated with macOS.


Otherwise, please contact the third-party app vendor for assistance. Contact Microsoft Support or check the Microsoft Defender forums at Microsoft, if this is Defender Antivirus or a related end-point app.


Or if this is an IT-managed Mac, contact your IT support organization.


Pragmatically, this looks like a not-something-to-be-bothered-with alert, probably reporting some phishing text from some phishing email received somewhere. Which is pretty much a normal day on the ‘net. (Which makes me wonder why the app even bothered to flag it.)


If this actually is Defender Antivirus, the docs are surprisingly lacking. Maybe they’re protected away somewhere?


And yeah, as mentioned above, third-party app quarantining tends to end badly.


Potential Translations:


SDP: Safe Deployment Practices


MTB: Malware Threat Behavior? Maybe? Unclear.


Presumably the rest of the malware name indicates phishing and a link to a fake login portal somewhere. (Many of us get those phishing messages daily. A bank I don’t do business with was contacting me about my account security just recently, too. With a satisfyingly sketchy link to the bank’s “login portal”.)


This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

How do I get rid of it

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.