[onmobiletemp]

Why were they going after 1password filevaults? I assume 1password is like keypass, where all your passwords are in an encrypted file? How could they decrypt all those files? Or do they assume people use weak passwords?

[microtonal]

According to the article this malware also does keylogging. So, presumably, they'll have the vault password as well.

[onmobiletemp]

Derp