Clean up complete!
Modern TNT variants have been observed installing a LaunchDaemon that checks a remote command-and-control (C2) server every 6 hours. This allows the attacker to remotely execute arbitrary code, install ransomware, or use your Mac as a bot in a DDoS attack. CleanMyMac-X-4.10.0--TNT.dmg
While these files are heavily circulated on torrent sites and warez blogs, they carry severe risks for macOS users: Malware and Adware Injection Clean up complete