The tricky shenanigans behind a stealthy Apple Keychain attack

Lily Hay Newman for Wired:
In early February, an 18-year-old German security researcher named Linus Henze demonstrated a macOS attack that would allow a malicious application to grab passwords from Apple’s protected keychain. “You know, the ones ‘securely’ stored so that no one can steal them :)” he wrote. Dubbed KeySteal, the attack called attention to the fact that the macOS keychain makes a very attractive target for hackers. Apple patched the flaw that KeySteal