Tech
Everything you need to know about the malware stealing data from Mac users
Mac users have a new malware threat to be on the watch out for.
According to a new report by Malwarebytes, Infiniti Stealer is a new malware attack targeting Mac users that utilizes social engineering tactics and, once the payload is delivered to the device, is very difficult to detect.
Infiniti Stealer
The hacker's campaign, according to the report, begins with a social engineering technique known as ClickFix. ClickFix is a tactic that tricks the target themself into executing malicious code on their computer.
The targeted user is presented with a website, often through a phishing email or a pop-up on a compromised page, with an urgent update warning that claims to require the user to complete a Cloudflare human verification captcha.
The target is presented with a traditional "I am not a robot" box to check. However, the target is also asked to complete a "manual step." The page instructs the user to go to Spotlight on their Mac and search for the Terminal app. They are then instructed to paste a provided code into Terminal and hit return.
This code delivers Infiniti Stealer to the target's Mac.
"Because the user runs the command directly, many traditional defenses are bypassed," Malwarebytes says in its report. "There’s no exploit, no malicious attachment, and no drive‑by download."
According to Malwaybytes, the malware that's delivered to the victim's Mac is written in Python but compiled with Nuitka, which creates a native macOS binary. This makes Infiniti Stealer much more difficult to analyze and detect than the more typical type of malware.
"To our knowledge, this is the first documented macOS campaign combining ClickFix delivery with a Nuitka-compiled Python stealer," Malwarebytes says.
Once Infiniti Stealer is installed on a device, it will attempt to steal data from the victim's Mac and upload that information to the attacker's own server. Passwords, screenshots, browser data like cookies, and other sensitive information can be stolen from victims in these types of malware attacks.
Be aware of malware threats
Users should always be careful when following instructions from a website that they are unfamiliar with. Even then, users should be careful they are on a legitimate website of a company they do recognize and not a phishing website run by a bad actor.
Users should be aware that there is no form of captcha or verification that requires code to be entered in the Terminal app.
Furthermore, I typically recommend that anyone who isn't somewhat familiar with code to avoid any process that requires entering code in their Mac's Terminal.
If a user believes they may have been infected with malware, Malwarebytes recommends that they stop using the affected computer. They should change their account passwords on a completely separate device and, if possible, revoke access from the infected computer.
Infiniti Stealer appears to follow a new trend of bad actors targeting Apple devices due to the incorrect perception that they are immune from viruses and other types of attacks. DarkSword, for example, is another new threat targeting iPhones and other iOS devices with a malware attack that doesn't even require a user to download any sort of malicious file.
Save $120: As of April 13, you can grab the Beelink SER5 MAX 7735HS mini PC with 24GB of RAM and 1TB of storage for just $539, thanks to an on-page coupon at Amazon. Usually, this mini PC costs $659, so this deal saves you 18%.
Opens in a new window
at Amazon
$659.01
Save $120.01
Despite its security flaws, OpenClaw's popularity as an open-source AI assistant has catapulted it to proper viral status (at least, within the AI community). While many users were running to pick up Mac Minis to run the assistant, the Apple computer isn't exactly at its cheapest right now.
Don't get us wrong — you can catch the Mac Mini on sale from time to time. But as of April 13, the $599 regular M4 version is unavailable at Amazon, and the more expensive M4 Pro model will run you $1,419.99 — not exactly the most cost effective solution.
Our advice? Check out other mini PCs on the market. At the time of writing, the Beelink SER5 MAX 7735HS mini PC with AMD Ryzen 7, 24GB RAM, and 1TB SSD is on sale for $539 with an on-page coupon, knocking $120 off its usual $659. Even when the M4 Mac mini is available, it can be harder to find it below $549, making this an especially competitive price for the Beelink PC.
Just a note: its important to be aware of the security risks that come with using this open source AI tool. And if you're already using OpenClaw, be sure to update to the latest version immediately.
SAVE 30%: As of April 13, you can get the DJI Mini 4K for $209, down from $299, at Amazon. That's a 30% discount or $90 savings.
Opens in a new window
My dad and my cousin are obsessed with drones, so I've spent enough time watching them fly to know two things: the really good ones are usually very expensive, and they're easy to crash if you don't know what you're doing (and sometimes, even if you do!).
If you've been wanting to get into the hobby without the steep learning curve (or the high price tag), this DJI model is a great place to start. Right now, the DJI Mini 4K is listed at $299, but if you clip the on-page coupon, it drops to $209.
Despite its tiny size, this drone has the practical features you need to get in the air quickly. It has a 4K Ultra HD camera paired with a 3-axis gimbal to keep your footage smooth and cinematic. Because it weighs under 249 grams, you don't have to worry about FAA registration or Remote ID for recreational use. It also has a maximum flight time of 31 minutes, Level 5 wind resistance (stable in winds up to 38kph), and a 10km video transmission range.
If you're worried about flying it into a tree or the ocean, it features one-tap takeoff and landing, stable hovering, and a GPS Return to Home (RTH) function, so you don't have to panic if you lose it. It even comes with intelligent QuickShots modes that automatically fly the drone in cinematic patterns to get you professional-looking shots with just a few taps (which could be good if you're a real estate agent or photographer!).
SAVE $404.03: The Bluetti Elite 100 V2 is on sale at Amazon for $394.97, down from the list price of $799. That's a 51% discount.
Opens in a new window
Memorial Day weekend will be here in just over a month. After that, we'll officially be in summer camping season. If you've been hearing about portable power stations and how useful they can be at the campground but don't own one yet, consider this sale your sign.
As of April 13, the Bluetti Elite 100 V2 is on sale at Amazon for $394.97, marked down from the normal price of $799. That's a 51% discount that takes $404.03 off the price.
Packing in 1,024Wh, the Bluetti Elite 100 V2 is well worth bringing along on your next weekend away. It'll be able to recharge phones, laptops, drone batteries, camping lights, and keep the coffee pot running each morning.
Bluetti equipped this model with four standard AC ports, two USB-A ports, and two USB-C ports. Plus, it only weighs about 25 pounds so it'll be portable enough to carry around the campsite. It's also a relatively quiet model, operating at about 30 decibels, which will be nice if you're using it to power up a CPAP machine at night.
With 45 minutes of standard wall AC recharging, the Bluetti Elite 100 V2 will go from 0 to 80% charge in about 45 minutes. A full charge should take around 70 minutes. You can also connect the Elite 100 V2 to up to 1,000W of solar power for recharging. With that input, expect to get a full recharge in about 70 minutes.
Before you head off on the next camping adventure, upgrade you setup with the Bluetti Elite 100 V2. It's down to an incredibly affordable price of under $395. That's nearly as good as it gets for a power station in the 1K Wh range.
HORROR: 21-Year-Old Marine Stabbed to Death on Easter Morning by Unknown Assailant in North Carolina – Person of Interest Sought in Incident
Patronizing Democrat MA Governor Maura Healey Uses Donuts to Explain Soaring Energy Costs to Suffering Constituents (Video)
Acting AG Todd Blanche Says Reporter Could Be Subpoenaed in Iran Leak Investigation
SEND IN THE TROOPS! At Least 5 Dead, 10 Wounded So Far in Chicago Weekend Shootings
How I Paid Off My Mortgage 10 Years Early On A Teacher’s Salary
Black Lives Matter Activist in Boston Pleads Guilty to Federal Fraud Charges – Scammed Donors to Fund Her Lifestyle
-
Politics7 months agoSEND IN THE TROOPS! At Least 5 Dead, 10 Wounded So Far in Chicago Weekend Shootings
-
Business7 months ago
How I Paid Off My Mortgage 10 Years Early On A Teacher’s Salary
-
Politics7 months agoBlack Lives Matter Activist in Boston Pleads Guilty to Federal Fraud Charges – Scammed Donors to Fund Her Lifestyle
-
Tech7 months agoGet a lifetime subscription to the “ChatGPT for investors” for under $60
-
Tech7 months agoReview: The Dreame H15 Pro CarpetFlex is the first wet/dry vacuum I liked
-
Business7 months ago
25 Low-Effort Side Hustles You Can Start This Weekend
-
Tech7 months agoHow much does the Roborock Saros Z70 cost? And does it ever go on sale?
-
Business7 months ago
9 Ways to Command a Six-Figure Salary Without a Bachelor’s