A new malware program that targets Mac users is capable of spying on encrypted browser traffic to steal sensitive information. The program, dubbed OSX/Dok, was distributed via email phishing campaigns to users in Europe. The malware was attached to the email as a file called Dokument.zip. It’s not clear if the creators paid to obtain a developer certificate by joining Apple’s developer program with a fake identity or if they stole the certificate from a legitimate developer. Once the malware obtains elevated privileges, it will make the active user a permanent administrator so the OS will never ask for the password again.”]