Technology ❯ Software ❯ Updates ❯ Apple
By coaxing victims to paste a Terminal command the campaign extracts Keychain and browser keys, then leaves a stealthy GSocket backdoor for ongoing access.