Recently, a malicious application called OSX Dok was found in the macOS system, which changes settings to reduce the level of protection. Now it has learned to impersonate bank sites, trying to steal user data to gain access to their accounts.
They use phishing and "man in the middle" attacks to penetrate computers, which ESET reported in May. First, the program fraudulently lured access to personal data of users, and then reached the bank accounts. Fake websites of banks force users to install the application on a mobile device, which can lead to additional leakage of personal data.
Apple constantly recalls the certificates used by the application to penetrate the devices, but there is little sense from this. The authors of the program continue to receive new certificates every day.
Companies like Google, Microsoft and Apple are struggling with phishing, but it depends only on the user whether he will go only from links from trusted sources or not. Many financial institutions update their sites with warnings of threats, and in the light of the latest attacks of extortion applications, special care should be taken.