Tech
Everything you need to know about the malware stealing data from Mac users
Mac users have a new malware threat to be on the watch out for.
According to a new report by Malwarebytes, Infiniti Stealer is a new malware attack targeting Mac users that utilizes social engineering tactics and, once the payload is delivered to the device, is very difficult to detect.
Infiniti Stealer
The hacker's campaign, according to the report, begins with a social engineering technique known as ClickFix. ClickFix is a tactic that tricks the target themself into executing malicious code on their computer.
The targeted user is presented with a website, often through a phishing email or a pop-up on a compromised page, with an urgent update warning that claims to require the user to complete a Cloudflare human verification captcha.
The target is presented with a traditional "I am not a robot" box to check. However, the target is also asked to complete a "manual step." The page instructs the user to go to Spotlight on their Mac and search for the Terminal app. They are then instructed to paste a provided code into Terminal and hit return.
This code delivers Infiniti Stealer to the target's Mac.
"Because the user runs the command directly, many traditional defenses are bypassed," Malwarebytes says in its report. "There’s no exploit, no malicious attachment, and no drive‑by download."
According to Malwaybytes, the malware that's delivered to the victim's Mac is written in Python but compiled with Nuitka, which creates a native macOS binary. This makes Infiniti Stealer much more difficult to analyze and detect than the more typical type of malware.
"To our knowledge, this is the first documented macOS campaign combining ClickFix delivery with a Nuitka-compiled Python stealer," Malwarebytes says.
Once Infiniti Stealer is installed on a device, it will attempt to steal data from the victim's Mac and upload that information to the attacker's own server. Passwords, screenshots, browser data like cookies, and other sensitive information can be stolen from victims in these types of malware attacks.
Be aware of malware threats
Users should always be careful when following instructions from a website that they are unfamiliar with. Even then, users should be careful they are on a legitimate website of a company they do recognize and not a phishing website run by a bad actor.
Users should be aware that there is no form of captcha or verification that requires code to be entered in the Terminal app.
Furthermore, I typically recommend that anyone who isn't somewhat familiar with code to avoid any process that requires entering code in their Mac's Terminal.
If a user believes they may have been infected with malware, Malwarebytes recommends that they stop using the affected computer. They should change their account passwords on a completely separate device and, if possible, revoke access from the infected computer.
Infiniti Stealer appears to follow a new trend of bad actors targeting Apple devices due to the incorrect perception that they are immune from viruses and other types of attacks. DarkSword, for example, is another new threat targeting iPhones and other iOS devices with a malware attack that doesn't even require a user to download any sort of malicious file.
SAVE 20%: As of April 20, you can get the Sony QD-OLED 77-inch BRAVIA XR A95L Series 4K Ultra HD TV for $3,999.99, down from $4,999.99. That's a 20% discount or $1,000 savings.
Hooking up a PlayStation 5 to a mediocre screen is a quick way to ruin the graphics you paid for. If you want your games to look the way they were intended, you need a TV that can keep up with the console.
Right now, you can get the Sony QD-OLED 77-inch BRAVIA XR A95L Series 4K Ultra HD TV for $3,999.99 at Amazon, down from $4,999.99. That's a 20% discount, or $1,000 in savings.
Since Sony makes both the console and the TV, you'll get exclusive features like Auto HDR Tone Mapping that optimize the picture quality while you play. It has HDMI 2.1 for 4K gaming at 120Hz, so you don't have to deal with lag, and there's a dedicated Game Menu to adjust your settings on the fly. When you put the controller down, the QD-OLED screen gives you pure blacks and bright colors for movie night, with Google TV built in so you have all your streaming apps in one place.
SAVE $120: As of April 20, the DJI Mini 3 beginner-friendly drone is on sale at Amazon for only $299 with an on-page coupon. That's nearly 30% in savings and its best price on record.
Opens in a new window
Everyone from real estate agents to marketing managers to casual Instagrammers could use a drone to capture more enticing footage. But drones don't typically come with the most affordable price tags, which is why we're highlighting this deal we spotted on the DJI Mini 3. At nearly 30% off, it's the cheapest we've ever seen it.
As of April 20, the beginner-friendly DJI Mini 3 is down to $299 with an on-page coupon at Amazon. That's $120 off its list price of $419 and just the second time we've seen the price drop this low. Just be sure to check the box that says "coupon price" to score the discount.
Weighing in at just half a pound, the DJI Mini 3 is true to its name. It folds up to an even more compact size for transport. It captures 4K HDR video and its innovative gimbal design allows for true vertical shooting and dynamic angles. Translation: you'll be able to snap some truly epic shots for social media. You'll get about 38 minutes of flight time before you need a charge or battery swap, but you can extend that to up to 51 minutes if you purchase the Intelligent Flight Battery Plus (sold separately).
The Mini 3 is level 5 wind-resistant, so you can still take flight and capture footage in less than ideal conditions. Plus, intelligent features like auto takeoff, RTH (return to home), and precise hovering help beginners get started without a steep learning curve.
It's not every day the popular DJI Mini 3 goes on sale for $120 off. If you're in the market for a beginner-friendly drone, click on that coupon box and snag it while you can.
A world half-marathon record was broken at a race in China this weekend. But the winner wasn't an Olympian or even a competitive racer. It was a bright red humanoid robot. Nickname? Lightning.
The autonomous robot was competing in a robot versus human half-marathon race in Beijing, China, an annual event featuring the country's top robotics companies in a foot race test against their human counterparts.
Lightning was built by Honor, a Chinese robotics and smartphone maker. The company tested other running robot variants at the race, including the bots that took home second- and third-place titles.
Mashable got an early look at Honor's new line of AI-powered humanoid bots at the latest Mobile World Congress. The bots had an impressive stability (many of these two-legged bots are prone to tumbling) and even a crowd-pleasing dance performance. The company also debuted a new "Robot Phone," featuring a robotic eye and arm that juts out from the smartphone to take photos and respond to requests.
During Sunday's race, the company showed that the new era of humanoid robots aren't just dancers, but competitive athletes, with Lightning taking home the gold in a 50-minute and 26-second sprint — that's six minutes quicker than the fastest human and nearly two hours faster than its time in last year's race. Honor engineers explained that the robot's fast upgrade came from modeling its design after top athletes, including elongated legs and an internal liquid-cooling system.
This Tweet is currently unavailable. It might be loading or has been removed.
This Tweet is currently unavailable. It might be loading or has been removed.
Chinese robotics companies have been accelerating their development of humanoid robots over the last several years in direct competition with U.S. manufacturers. Lightning's record-breaking win was taken as a sign that the country's investments may be paying off.
Still, many of the robots needed assistance to cross the finish line. In addition to starting line stumbles and a few falls, about 60 percent of the competing bots were remotely operated by their human teams.
Want to learn more about getting the best out of your tech? Sign up for Mashable's Top Stories and Deals newsletters today.
Grab Sonys 77-inch QD-OLED 4K TV while its $1,000 off
The DJI Mini 3 beginner-friendly drone is down to an all-time low $299 at Amazon
A robot runner just beat a half-marathon record
SEND IN THE TROOPS! At Least 5 Dead, 10 Wounded So Far in Chicago Weekend Shootings
How I Paid Off My Mortgage 10 Years Early On A Teacher’s Salary
Black Lives Matter Activist in Boston Pleads Guilty to Federal Fraud Charges – Scammed Donors to Fund Her Lifestyle
-
Politics8 months agoSEND IN THE TROOPS! At Least 5 Dead, 10 Wounded So Far in Chicago Weekend Shootings
-
Business7 months ago
How I Paid Off My Mortgage 10 Years Early On A Teacher’s Salary
-
Politics7 months agoBlack Lives Matter Activist in Boston Pleads Guilty to Federal Fraud Charges – Scammed Donors to Fund Her Lifestyle
-
Tech8 months agoGet a lifetime subscription to the “ChatGPT for investors” for under $60
-
Tech7 months agoReview: The Dreame H15 Pro CarpetFlex is the first wet/dry vacuum I liked
-
Business8 months ago
25 Low-Effort Side Hustles You Can Start This Weekend
-
Tech8 months agoHow much does the Roborock Saros Z70 cost? And does it ever go on sale?
-
Business8 months ago
9 Ways to Command a Six-Figure Salary Without a Bachelor’s