A recently-discovered
macOS malware called OSX Dok, which alters the operating system to subvert the security measures put in place, has now started mirroring banking websites according to researchers, in an attempt to steal sensitive information from machines which are infected by it. The malware which uses 'phishing' and 'man in the middle' attacks to sneak onto an unsuspecting user's computer, was discovered back in May by ESET. Initially, it only tricked people into allowing access to their keychain, but since then, has morphed and is now targeting their bank accounts
Apple, however, has continued to revoke the certificates that the malware used to gain access to the underlying system, but this seems to have had little to no effect on it so far. Researchers noted that the group behind the malicious program has continued to get new certificates; what they described as a 'surge in activity' with new compromised certifications being purchased daily.