Broken isolation - Draining your Credentials from Popular macOS Password Managers

No ratings

Presented at Objective by the Sea 2024 by

Wojciech Regula

objectivebythesea.orgyoutu.be

In theory, theory and practice are the same. In theory, all modern macOS applications must be isolated what is enforced by notarization and sandboxing. In practice these enforcements are usually ineffective. This talk starts by explaining basic isolation assumptions and quickly shifts to exploitation. I have selected a few the most popular macOS password managers written in different technologies to prove how a low-privileged malware can abuse various tricks and 0,n-day vulnerabilities to drain your credentials.