Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

micqo

macrumors regular
Original poster
Oct 9, 2014
140
66
Hey, I'm using Keychain via iCloud, and just found something odd for me... So hope someone can help me??

There's two odd program accounts/passwords...

__iokstg__

__iokgtg__

…and there is something odd user-group detail on these (because I'm not sure, and don't understad is this something important what I should not say, so I'm not going to write all details... but it starts FBT4....com.iovation.stm

Pls, help me - should I be worried? :(
 
  • Like
Reactions: flygirlATL
Iovation is a service that assesses device risk for online transactions. Either Apple has integrated with them natively (my guess) or some other app you used has. I have them in my keychain. It took me like 10s to find this info on google what Iovation does.

What is interesting to me is that people are watching their keychains and wondering about the various entries. I do it as I’m a security researcher interested in decrypting Apple stuff. But I’m curious as to why non-technical people are even looking at this? There is absolutely no reason for any malicious software to put ANYTHING in your keychain. Getting stuff out, yes. Putting stuff in? No point. But it would be like a thief sneaking into your house and putting a random key on your key ring. It just doesn’t make sense. Malware isn’t obligated to follow best practices around securely storing data. It would also leave obvious traces on your system and likely pop up a prompt if it ever tried to fetch the data since malware isn’t typically signed properly.

The OS and native apps keep lots of stuff in there. There really isn’t any reason to worry about anything in there.
 
  • Like
Reactions: chabig
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.