For the second time this week, Mac users have to worry about a threat to their security. The threat that was discovered by security company ESET is called Keydnap, which is a play on OS X’s keychain which is where passwords are stored. ESET said that the Mas OS X threat steals your credentials. What is scary is that it isn’t clear how you get infected:
It is still not clear how victims are initially exposed to OSX/Keydnap. It could be through attachments in spam messages, downloads from untrusted websites or something else.
But what is clear is what it can do. The malware has a mechanism to gather passwords and keys stored in OS X’s keychain and send them to who knows where. It also sets up a backdoor to allow someone to do additional things to an infected computer. Seeing as it isn’t clear how you get infected with this, the best course of action is to do the usual things. Such as not to download software from untrusted sources, make sure your anti-virus software is up to date, don’t disable OS X Gatekeeper, etc.
More on this as it comes.