SentinelOne flagging Jetbrains Toolbox for "peristence_deception"

Avatar
Mobile
Created

SentinelOne is quarantining jSpawnhelper for persistence_deception.  Latest version, knocks it out as soon as it runs. 

Votes

2

Share

3 comments
Avatar
Ivan Kuzmin
Created

Hi Mobile. Sorry for the inconvenience. We will look into it. By the latest version, do you mean Toolbox App 1.28.1, released yesterday?

 

0
Avatar
Chris
Created

seeing the same issue today in version

JetBrains Toolbox 2.0.1.16621, macOS 13.4.1

2
Avatar
Owen Gerrard
Created

Same here, /Applications/JetBrains Toolbox.app/Contents/MacOS/jetbrains-toolbox flagged with "Detected suspicious running process" for "persistence_deception".

JetBrains Toolbox 2.0.1.16621, macOS 13.4.1

SentinelOne Version 22.2.3.6268

0

Please sign in to leave a comment.