Re:OS X/Keydnap spreads via signed Transmission application
by Someone on Tuesday August 30, 2016 @02:53PM
(#12392825)
And, possibly, still the first time their website was compromised.
If so, chances are we will see this happen again. Adding a payload to an open source project and signing it with a new key is not rocket science.
Previously: https://news.ycombinator.com/item?id=11234589