features: Thomas Read, who also analyzed OSX/Dok, describes the malware's main goal: "[OSX.Dok] uses sophisticated means to monitor-and potentially alter-all HTTP and HTTPS traffic to and from the infected Mac. Installing a proxy to MitM traffic is a common technique found in Windows banking trojans - who try to steal users' banking credentials. As previous noted, Dok appears to be a Mac port of the Windows banking trojan 'Retefe. Let's take a closer look at how the malware is able to proxy all web traffic on an infected host