Security researchers at Malwarebytes have discovered a new variant of an adware installer that is leveraging an old trick to access the Keychain on MAC OS X. The new version of the installer automatically simulates a click on the Allow button as soon as it appears, in this way it gains access to the Safari Extensions List and then install a Genieo Safari extension. This time the new installer asks users to enter their admin password, after which it performs exactly the same operation of the first variant.”]
Source: http://securityaffairs.co/wordpress/39839/hacking/critical-os-x-keychain.html