Tech
Everything you need to know about the malware stealing data from Mac users
Mac users have a new malware threat to be on the watch out for.
According to a new report by Malwarebytes, Infiniti Stealer is a new malware attack targeting Mac users that utilizes social engineering tactics and, once the payload is delivered to the device, is very difficult to detect.
Infiniti Stealer
The hacker's campaign, according to the report, begins with a social engineering technique known as ClickFix. ClickFix is a tactic that tricks the target themself into executing malicious code on their computer.
The targeted user is presented with a website, often through a phishing email or a pop-up on a compromised page, with an urgent update warning that claims to require the user to complete a Cloudflare human verification captcha.
The target is presented with a traditional "I am not a robot" box to check. However, the target is also asked to complete a "manual step." The page instructs the user to go to Spotlight on their Mac and search for the Terminal app. They are then instructed to paste a provided code into Terminal and hit return.
This code delivers Infiniti Stealer to the target's Mac.
"Because the user runs the command directly, many traditional defenses are bypassed," Malwarebytes says in its report. "There’s no exploit, no malicious attachment, and no drive‑by download."
According to Malwaybytes, the malware that's delivered to the victim's Mac is written in Python but compiled with Nuitka, which creates a native macOS binary. This makes Infiniti Stealer much more difficult to analyze and detect than the more typical type of malware.
"To our knowledge, this is the first documented macOS campaign combining ClickFix delivery with a Nuitka-compiled Python stealer," Malwarebytes says.
Once Infiniti Stealer is installed on a device, it will attempt to steal data from the victim's Mac and upload that information to the attacker's own server. Passwords, screenshots, browser data like cookies, and other sensitive information can be stolen from victims in these types of malware attacks.
Be aware of malware threats
Users should always be careful when following instructions from a website that they are unfamiliar with. Even then, users should be careful they are on a legitimate website of a company they do recognize and not a phishing website run by a bad actor.
Users should be aware that there is no form of captcha or verification that requires code to be entered in the Terminal app.
Furthermore, I typically recommend that anyone who isn't somewhat familiar with code to avoid any process that requires entering code in their Mac's Terminal.
If a user believes they may have been infected with malware, Malwarebytes recommends that they stop using the affected computer. They should change their account passwords on a completely separate device and, if possible, revoke access from the infected computer.
Infiniti Stealer appears to follow a new trend of bad actors targeting Apple devices due to the incorrect perception that they are immune from viruses and other types of attacks. DarkSword, for example, is another new threat targeting iPhones and other iOS devices with a malware attack that doesn't even require a user to download any sort of malicious file.
Tech
The Sony XM6 earbuds are the best audio product Ive tested this year — and theyre back at their lowest price ever
Save $31.99: Take 10% off the Sony WF-1000XM6 earbuds at Amazon as of April 20. This brings them down to $298, instead of their list price of $329.99.
Opens in a new window
As a headphones reviewer, I get plenty experience testing out the latest and greatest audio has to offer. As a budget-buys lover, I don't always see the point of increasingly high price points.
Then, I tried the Sony WF-1000XM6 earbuds. At $329.99, these earbuds aren't cheap, sitting at an even higher price than Bose's flagship earbuds and the Technics EAH-AZ1000, another Mashable favorite. However, as of April 20, the Sony buds are down to a slightly better $298, marking a return to their lowest price ever.
Don't get me wrong — I get that $300 isn't exactly chump change. That said, I consider these earbuds an investment for anyone who wants the absolute best blend of sound, comfort, and noise cancellation. To be clear, I still think the Bose QC Ultra 2 buds lead the category on the comfort scale, but between the best noise cancellation and sound I've tried on a pair of earbuds, I get why these are priced the way they are.
As these are Sony buds, the companion app also offers great customization, with a 10-band equalizer for finding the sound that's just right. At eight hours per charge, their battery life is also competitive with other noise-cancelling favorites of Mashable's, like the Apple AirPods Pro 3.
I loved the XM6 earbuds when I first reviewed them earlier this year, and I continue to love them months later. Unless the audio space throws a real curveball, I imagine these will be one of the best releases of the year.
SAVE 20%: As of April 20, you can get the Sony QD-OLED 77-inch BRAVIA XR A95L Series 4K Ultra HD TV for $3,999.99, down from $4,999.99. That's a 20% discount or $1,000 savings.
Hooking up a PlayStation 5 to a mediocre screen is a quick way to ruin the graphics you paid for. If you want your games to look the way they were intended, you need a TV that can keep up with the console.
Right now, you can get the Sony QD-OLED 77-inch BRAVIA XR A95L Series 4K Ultra HD TV for $3,999.99 at Amazon, down from $4,999.99. That's a 20% discount, or $1,000 in savings.
Since Sony makes both the console and the TV, you'll get exclusive features like Auto HDR Tone Mapping that optimize the picture quality while you play. It has HDMI 2.1 for 4K gaming at 120Hz, so you don't have to deal with lag, and there's a dedicated Game Menu to adjust your settings on the fly. When you put the controller down, the QD-OLED screen gives you pure blacks and bright colors for movie night, with Google TV built in so you have all your streaming apps in one place.
SAVE $120: As of April 20, the DJI Mini 3 beginner-friendly drone is on sale at Amazon for only $299 with an on-page coupon. That's nearly 30% in savings and its best price on record.
Opens in a new window
Everyone from real estate agents to marketing managers to casual Instagrammers could use a drone to capture more enticing footage. But drones don't typically come with the most affordable price tags, which is why we're highlighting this deal we spotted on the DJI Mini 3. At nearly 30% off, it's the cheapest we've ever seen it.
As of April 20, the beginner-friendly DJI Mini 3 is down to $299 with an on-page coupon at Amazon. That's $120 off its list price of $419 and just the second time we've seen the price drop this low. Just be sure to check the box that says "coupon price" to score the discount.
Weighing in at just half a pound, the DJI Mini 3 is true to its name. It folds up to an even more compact size for transport. It captures 4K HDR video and its innovative gimbal design allows for true vertical shooting and dynamic angles. Translation: you'll be able to snap some truly epic shots for social media. You'll get about 38 minutes of flight time before you need a charge or battery swap, but you can extend that to up to 51 minutes if you purchase the Intelligent Flight Battery Plus (sold separately).
The Mini 3 is level 5 wind-resistant, so you can still take flight and capture footage in less than ideal conditions. Plus, intelligent features like auto takeoff, RTH (return to home), and precise hovering help beginners get started without a steep learning curve.
It's not every day the popular DJI Mini 3 goes on sale for $120 off. If you're in the market for a beginner-friendly drone, click on that coupon box and snag it while you can.
Rep. Anna Paulina Warns Of ‘Major Purge’ Coming to Capitol Hill — Says At Least Three More Members Could Be Exposed (VIDEO)
Iranian Woman with a US Green Card Busted at LAX for Trafficking Drones, Bombs, and Millions of Rounds of Ammo on Behalf of the Tehran Regime
Supreme Court Justices Alito and Thomas Not Planning to Retire This Year
SEND IN THE TROOPS! At Least 5 Dead, 10 Wounded So Far in Chicago Weekend Shootings
How I Paid Off My Mortgage 10 Years Early On A Teacher’s Salary
Black Lives Matter Activist in Boston Pleads Guilty to Federal Fraud Charges – Scammed Donors to Fund Her Lifestyle
-
Politics8 months agoSEND IN THE TROOPS! At Least 5 Dead, 10 Wounded So Far in Chicago Weekend Shootings
-
Business7 months ago
How I Paid Off My Mortgage 10 Years Early On A Teacher’s Salary
-
Politics7 months agoBlack Lives Matter Activist in Boston Pleads Guilty to Federal Fraud Charges – Scammed Donors to Fund Her Lifestyle
-
Tech8 months agoGet a lifetime subscription to the “ChatGPT for investors” for under $60
-
Tech7 months agoReview: The Dreame H15 Pro CarpetFlex is the first wet/dry vacuum I liked
-
Business8 months ago
25 Low-Effort Side Hustles You Can Start This Weekend
-
Tech8 months agoHow much does the Roborock Saros Z70 cost? And does it ever go on sale?
-
Business8 months ago
9 Ways to Command a Six-Figure Salary Without a Bachelor’s