Malware Has a New Way to Hide on Your Mac

By only checking a file's code signature when you install it—and never again—macOS gives malware a chance to evade detection indefinitely.

from
https://www.wired.com/story/mac-malware-hide-code-signing