# How a macOS bug could have allowed for a serious phishing attack against users

DevFeed: [How a macOS bug could have allowed for a serious phishing attack against users](<https://devfeed.tech/articles/how-a-macos-bug-could-have-allowed-for-a-serious-phishing-attack-against-users-39524.md>)

Original publisher: [Read original article](<https://rambo.codes/posts/2022-03-15-how-a-macos-bug-could-have-allowed-for-a-serious-phishing-attack-against-users>)

Published: 2022-03-14T18:00:00Z

Content type: article

Language: en

Sources: [Rambo Codes](<https://devfeed.tech/sources/rambo-codes.md>)

Topics: [macOS](<https://devfeed.tech/topics/macos.md>), [bug](<https://devfeed.tech/topics/bug.md>), [Social engineering](<https://devfeed.tech/topics/social-engineering.md>), [passwords](<https://devfeed.tech/topics/passwords.md>), [App](<https://devfeed.tech/topics/app.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [bug](<https://devfeed.tech/tags/bug.md>), [macos](<https://devfeed.tech/tags/macos.md>), [password](<https://devfeed.tech/tags/password.md>), [phishing](<https://devfeed.tech/tags/phishing.md>), [social-engineering](<https://devfeed.tech/tags/social-engineering.md>), [users](<https://devfeed.tech/tags/users.md>)

## AI overview

This article explains how a macOS bug could make phishing more convincing by allowing any running app to display a notification that appeared to come from System Preferences. Following the alert could open a fake Apple ID login panel that sent entered credentials to an attacker, with a possible two-factor authentication deception scenario.

## Source excerpt

Gui Rambo writes about his coding and reverse engineering adventures.