http://blog.checkpoint.com/2017/04/27/osx-malware-catching-wants-read-https-traffic/

This is really scary. They can intercept all data, including encrypted data.