Proton

Proton is a malicious software, or malware, that has been found to exploit and damage computer systems. It can infect systems through suspicious downloads, emails, or websites, often without the user's knowledge. Once inside, Proton has the capability to steal personal information, disrupt operations, or even hold data hostage for ransom. The malware has been associated with several system files related to ProtonVPN, including "ProtonVPN.CalloutDriver.sys", "ProtonVPNService.exe", "ProtonVPN.WireGuardService.exe", and "ProtonVPN.UpdateService.exe". These were discovered in the Program Files directory of infected devices. The impact of Proton has been significant, leading to the removal of popular VPN apps like Proton VPN, Red Shield VPN, NordVPN, and Le VPN. Encrypted services like Apple, Proton, and Wire have been implicated in aiding Spanish police identify an activist, indicating that Proton's reach extends beyond individual devices and into larger networks. Moreover, the latest version of Proton VPN (version 4.3.0) has displayed issues during configuration, suggesting that the malware may be interfering with the operation of legitimate software. The response to the Proton threat has seen endorsements for draft legislation from various tech companies and organizations, including Accountable Tech, Demand Progress, Fight for the Future, Proton, Nym, and the Matrix.org Foundation. A Security Risk and Governance Manager at Proton, the Swiss-based company behind Proton VPN, Proton Mail, Proton Pass, and Proton Drive, is now working on mitigating the risks posed by the malware. This comes after evidence presented at trial demonstrated misuse of Proton-related services, such as the fraudulent billing of Medicaid for a certain type of proton pump inhibitor.