Connect with us

Tech

Everything you need to know about the malware stealing data from Mac users

Published

on

MacBook in the dark using Terminal

Mac users have a new malware threat to be on the watch out for.

According to a new report by Malwarebytes, Infiniti Stealer is a new malware attack targeting Mac users that utilizes social engineering tactics and, once the payload is delivered to the device, is very difficult to detect.

Infiniti Stealer

The hacker's campaign, according to the report, begins with a social engineering technique known as ClickFix. ClickFix is a tactic that tricks the target themself into executing malicious code on their computer.

The targeted user is presented with a website, often through a phishing email or a pop-up on a compromised page, with an urgent update warning that claims to require the user to complete a Cloudflare human verification captcha.

The target is presented with a traditional "I am not a robot" box to check. However, the target is also asked to complete a "manual step." The page instructs the user to go to Spotlight on their Mac and search for the Terminal app. They are then instructed to paste a provided code into Terminal and hit return.

This code delivers Infiniti Stealer to the target's Mac.

"Because the user runs the command directly, many traditional defenses are bypassed," Malwarebytes says in its report. "There’s no exploit, no malicious attachment, and no drive‑by download."

According to Malwaybytes, the malware that's delivered to the victim's Mac is written in Python but compiled with Nuitka, which creates a native macOS binary. This makes Infiniti Stealer much more difficult to analyze and detect than the more typical type of malware.

"To our knowledge, this is the first documented macOS campaign combining ClickFix delivery with a Nuitka-compiled Python stealer," Malwarebytes says.

Once Infiniti Stealer is installed on a device, it will attempt to steal data from the victim's Mac and upload that information to the attacker's own server. Passwords, screenshots, browser data like cookies, and other sensitive information can be stolen from victims in these types of malware attacks.

Be aware of malware threats

Users should always be careful when following instructions from a website that they are unfamiliar with. Even then, users should be careful they are on a legitimate website of a company they do recognize and not a phishing website run by a bad actor.

Users should be aware that there is no form of captcha or verification that requires code to be entered in the Terminal app.

Furthermore, I typically recommend that anyone who isn't somewhat familiar with code to avoid any process that requires entering code in their Mac's Terminal.

If a user believes they may have been infected with malware, Malwarebytes recommends that they stop using the affected computer. They should change their account passwords on a completely separate device and, if possible, revoke access from the infected computer.

Infiniti Stealer appears to follow a new trend of bad actors targeting Apple devices due to the incorrect perception that they are immune from viruses and other types of attacks. DarkSword, for example, is another new threat targeting iPhones and other iOS devices with a malware attack that doesn't even require a user to download any sort of malicious file.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

Save up to 20% vs. the other big guys when you switch to T-Mobile

Published

on

By

Passing phone between hands

TL;DR: Save up to 20% when you switch to T-Mobile, compared to Verizon and AT&T.



t-mobile logo against a white background

Credit: T-Mobile

Save up to 20%

Spring is here, and if you’ve been thinking about spring cleaning your phone plan, it’s worth checking out T-Mobile. Switching from Verizon or AT&T can save you up to 20%.

T-Mobile has a few plans to choose from, each absolutely stacked with benefits. You can get free or discounted streaming services, such as Netflix, Apple TV, and Hulu. Depending on the plan you choose, you'll save up to $117 per month compared to Verizon and AT&T.

Mashable Deals
Be the first to know!

Get editor selected deals texted right to your phone!






By signing up, you agree to receive recurring automated SMS marketing messages from Mashable Deals at the number provided. Msg and data rates may apply. Up to 2 messages/day. Reply STOP to opt out, HELP for help. Consent is not a condition of purchase. See our Privacy Policy and Terms of Use.

Thanks for signing up!

No matter how many lines you add to your plan, T-Mobile always works out to be cheaper than the competition. If you’re curious about the cost breakdown, T-Mobile’s site features a helpful chart that shows you the cost across each company as you add more lines.

If you’ve been searching for a new phone plan, T-Mobile is surely worth a look.

Continue Reading

Tech

Hisense just launched the CanvasTV in a 50-inch size

Published

on

By

the Hisense CanvasTV mounted to a white wall in a home

Your TV no longer has to look like a void black rectangle when you turn it off. Instead, you can turn it into a framed piece of art with the Hisense CanvasTV. The brand just launched a new size that's perfect for a bedroom, kitchen, or studio apartment.


the 50-inch Hisense CanvasTV

Credit: Hisense

Joining its 55, 65, 75, and 85-inch comrades, the new 50-inch Hisense CanvasTV is the smallest option available. It's also the cheapest, coming with a price tag of $1,299.99. When you're not streaming your favorite shows, the TV transforms into a piece of framed artwork. The Hisense CanvasTV comes with a magnetic teak frame, but you're able to easily change the frame's vibe by getting the walnut or white finish option separately.

A 65-inch or larger TV might be awesome for living rooms or family rec rooms, but you might want something smaller in a bedroom, kitchen, or if you live in an apartment. That's where the new 50-inch TV could be the best option. Plus, it's the least expensive size.

the hisense canvasTV on a wall with other framed art


Credit: Hisense

Hisense designed the CanvasTV to sit flush with your wall, like a painting or other framed artwork would. You get access to over 1,000 works of art to display on your TV when it's not in use with no need to sign up for an additional subscription. Of course, you can also use your own photos or artwork with either the USB port or by uploading them the Hisense Art Gallery App.

If you're in the market for a TV that doesn't scream "blank TV" when it's not in use, the Hisense CanvasTV is a great option and now it comes in a great 50-inch size.

Continue Reading

Tech

Need a new smartwatch? The Samsung Galaxy Watch 8 is on sale and selling fast

Published

on

By

A close up of the Samsung Galaxy Watch 8.

SAVE 17%: As of April 6, you can get the Samsung Galaxy Watch 8 for $289.99, down from $349.99, at Amazon. That's a 17% discount or a $60 price cut.


If you prefer Android over iOS, Mashable's freelance tech reviewer, Adam Doud, says the Samsung Galaxy Watch 8 is "worth the upgrade" — and right now, you can grab it on sale.

As of April 6, you can snag the Samsung Galaxy Watch 8 for $289.99 at Amazon, down from $349.99. That's a 17% discount or $60 savings.

When it comes to health metrics, the Galaxy Watch 8 can "track just about everything you do." It features a running coach, heart rate tracking, and an Advanced Sleep Coach that assigns you a "sleep animal" based on how you snooze (which is kind of fun, IMO). Plus, it's the very first smartwatch to run Google Gemini AI right on the watch face, and it features a unique "squircle" design (a round face on a rounded-square base) that sits thinner and flatter on your wrist.

"In theory, if you follow the advice of the watch without outright dismissing it, it can help you live a better life," writes Doud. "And you'll look good doing it."

Continue Reading

Trending