“SecurID” will damage your computer

catalinagatekeeperjavamalwareSecurity

Today I've just started getting a warning dialog when I try to run the RSA SecurID app:

This is a Java app I believe. I use it to authenticate when I connect to my company's private network. I've been running Catalina (10.15.3) for some time but this has only just started happening today (after a reboot, FWIW).

Unlike previous Gatekeeper interventions there doesn't seem to be any obvious way to circumvent this warning and run the app, which is problematic as I can't work remotely without it.

UPDATE:

As suggested in the comments below, I downloaded and installed SecurID 4.2.1, and I now get a similar error message:

enter image description here

Best Answer

I had this same issue come up today - there must be some definition added to these scanners that's picking up the SecurID app. On one laptop, I was able to resolve it with just step 2 and 3 below but on another, I had to do the first as well. Since you're getting the stauto32.framework error, you'll probably need both steps like I did.

Step 1 - Delete the existing stauto32.framework folder - found at /Library/Frameworks/stauto32.framework

Step 2 - Download and run the 4.2.1 installer for the software token from RSA to upgrade or ensure the right things are all installed where they should be

Step 3 - open the info panel of the SecurID application in the Applications folder and check the 'Override Malware Protection' box

After that, when you run the app, it will ask for your password to access its various pieces stores in the Keychain and will also request access to a couple disk folders used in importing new tokens.

I hope that works for you as it did in our case!