Phishing-deployed malware can capture account credentials for any website users log into.
Article Link: http://www.darkreading.com/partner-perspectives/malwarebytes/osxdok-new-and-sophisticated-mac-malware-strikes/a/d-id/1328767?_mc=RSS_DR_EDT