Connect with us

Tech

Everything you need to know about the malware stealing data from Mac users

Published

on

MacBook in the dark using Terminal

Mac users have a new malware threat to be on the watch out for.

According to a new report by Malwarebytes, Infiniti Stealer is a new malware attack targeting Mac users that utilizes social engineering tactics and, once the payload is delivered to the device, is very difficult to detect.

Infiniti Stealer

The hacker's campaign, according to the report, begins with a social engineering technique known as ClickFix. ClickFix is a tactic that tricks the target themself into executing malicious code on their computer.

The targeted user is presented with a website, often through a phishing email or a pop-up on a compromised page, with an urgent update warning that claims to require the user to complete a Cloudflare human verification captcha.

The target is presented with a traditional "I am not a robot" box to check. However, the target is also asked to complete a "manual step." The page instructs the user to go to Spotlight on their Mac and search for the Terminal app. They are then instructed to paste a provided code into Terminal and hit return.

This code delivers Infiniti Stealer to the target's Mac.

"Because the user runs the command directly, many traditional defenses are bypassed," Malwarebytes says in its report. "There’s no exploit, no malicious attachment, and no drive‑by download."

According to Malwaybytes, the malware that's delivered to the victim's Mac is written in Python but compiled with Nuitka, which creates a native macOS binary. This makes Infiniti Stealer much more difficult to analyze and detect than the more typical type of malware.

"To our knowledge, this is the first documented macOS campaign combining ClickFix delivery with a Nuitka-compiled Python stealer," Malwarebytes says.

Once Infiniti Stealer is installed on a device, it will attempt to steal data from the victim's Mac and upload that information to the attacker's own server. Passwords, screenshots, browser data like cookies, and other sensitive information can be stolen from victims in these types of malware attacks.

Be aware of malware threats

Users should always be careful when following instructions from a website that they are unfamiliar with. Even then, users should be careful they are on a legitimate website of a company they do recognize and not a phishing website run by a bad actor.

Users should be aware that there is no form of captcha or verification that requires code to be entered in the Terminal app.

Furthermore, I typically recommend that anyone who isn't somewhat familiar with code to avoid any process that requires entering code in their Mac's Terminal.

If a user believes they may have been infected with malware, Malwarebytes recommends that they stop using the affected computer. They should change their account passwords on a completely separate device and, if possible, revoke access from the infected computer.

Infiniti Stealer appears to follow a new trend of bad actors targeting Apple devices due to the incorrect perception that they are immune from viruses and other types of attacks. DarkSword, for example, is another new threat targeting iPhones and other iOS devices with a malware attack that doesn't even require a user to download any sort of malicious file.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

Dysons double-laser, ultra-light PencilVac just hit a record-low price at Amazon

Published

on

By

Mashable's Leah Stodart using the Dyson PencilVac on a hardwood floor.

SAVE 25%: As of April 3, you can get the Dyson PencilVac for $449.99, down from $599.99. That's a 25% discount or $150 savings.


If you've been looking for a vacuum that takes the term "stick vacuum" literally, the ultra-slim and aptly named Dyson PencilVac features a 1.5-inch handle that fits right into the palm of your hand.

Right now, you can get the Dyson PencilVac at Amazon for $449.99, down from $599.99. That's a 25% discount or a $150 price cut. It's also the lowest price we've seen this model go for, according to our trusty price-tracking tool CamelCamelCamel. (Prime members can also take advantage of free returns and fast delivery.)

Mashable's Senior Shopping Reporter and vacuum expert, Leah Stodart, says the Dyson PencilVac "is a stick vacuum in the most literal sense of the term." It's super lightweight (less than four pounds), and the motor, battery, and dustbin are built completely flush into the wand. It also features these cool "Fluffycones" that actively strip long hair from the brush roll so it doesn't get tangled — though it doesn't come with a mini motorized pet tool. However, it more than makes up for it with its dual-laser action that lights up hidden dust and crumbs on your hard floors.

Continue Reading

Tech

This 55-inch Samsung OLED 4K TV is under $900 at Amazon — save $500

Published

on

By

the 55-inch Samsung OLED 4K TV on a pink and orange background

SAVE $500: The 55-inch Samsung OLED 4K S85F Series TV is on sale for $897.99 at Amazon, down from the list price of $1,397.99. That's a 36% discount.



55-inch Samsung OLED 4K S85F Series TV

Credit: Samsung

$897.99
at Amazon

$1,397.99
Save $500

The Amazon Big Spring Sale has come and gone, but Amazon forgot to turn off the discounts on TVs. We're still seeing many models sitting at their sale price two days later, but we're not mad. Baseball season is here, after all, and if you could use an upgrade to watch this year's games, check out this Samsung deal.

As of April 2, the 55-inch Samsung OLED 4K S85F Series TV is on sale at Amazon for $897.99, down from the list price of $1,397.99. That's a 36% discount that takes $500 off the price.

With 4K resolution, dynamic brightness, and excellent contrast, the 55-inch Samsung OLED TV will be a welcomed addition to your home's entertainment setup. Samsung mentions this model uses the brand's NQ4 AI Gen2 processor to ensure each scene has optimal brightness. Samsung also tapped into the color experts at Pantone to make sure skin tones were realistic and accurate.

When it comes to watching sports on the 55-inch Samsung OLED, the 120Hz Motion Xcelerator brings smoothness to quick movements. Plus, Samsung used object tracking sound technology which allows sound to follow objects on screen, giving a more life-like experience.

In addition to today's sale price, Amazon is tossing in free delivery and unpacking service, which usually costs $29.99. This means delivery will come to the room of your choice with unboxing and packaging removal.

Upgrade to the 55-inch Samsung OLED 4K S85F Series TV while it's still sitting at the sale price we saw earlier this week at Amazon's Big Spring Sale sale. You'll be saving $500 that can be used for your favorite streaming services in the future.

Continue Reading

Tech

The PlayStation 6 could ditch the built-in disc drive

Published

on

By

PlayStation logo on white background

The next generation of PlayStation consoles might not appeal to people who enjoy building physical game collections.

A hardware leaker known as KeplerL2 posted in the NeoGAF forums this week (via WCCF Tech), claiming that the still-unconfirmed PlayStation 6 will not have a disc drive built in.

In a reply to another user's inquiry, KeplerL2 also said the base PS6 would come with just 1TB of storage space on its internal SSD. For reference, that's exactly the same as most PS5 models. Typically, specs like that only get better over time, but it seems like Sony might make a lateral move at best for storage capacity this time around.

That's almost certainly because of the AI-driven global RAM shortage, which was recently rumored to potentially cause the PS6 to miss its intended late 2027 launch date. All things being equal, Sony might be inclined to put a 2TB drive in each base PS5, but that might not be feasible right now.

As for the lack of a disc drive, that's going to ruffle feathers for a multitude of reasons.

Yes, the PS5 has had a no-disc-drive variant since its launch in 2020, but Sony also sells a standalone attachable disc drive unit in case users want one. Obviously, Sony could do the same with the PS6, but we don't know that yet. And while a large majority of video game sales happen in digital marketplaces as opposed to physical retail stores, plenty of people still like to own their games, whether it's out of concern for digital storefronts eventually shutting down, or just to build a nice collection of physical media. And, of course, sometimes you get good discounts on used games.

Needless to say, if this is true, it will be controversial.

Want to learn more about getting the best out of your tech? Sign up for Mashable's Top Stories and Deals newsletters today.

Continue Reading

Trending