Tech

Everything you need to know about the malware stealing data from Mac users

Published

4 hours ago

April 4, 2026

Vicky

MacBook in the dark using Terminal

Mac users have a new malware threat to be on the watch out for.

According to a new report by Malwarebytes, Infiniti Stealer is a new malware attack targeting Mac users that utilizes social engineering tactics and, once the payload is delivered to the device, is very difficult to detect.

Table of Contents

Infiniti Stealer

The hacker's campaign, according to the report, begins with a social engineering technique known as ClickFix. ClickFix is a tactic that tricks the target themself into executing malicious code on their computer.

The targeted user is presented with a website, often through a phishing email or a pop-up on a compromised page, with an urgent update warning that claims to require the user to complete a Cloudflare human verification captcha.

The target is presented with a traditional "I am not a robot" box to check. However, the target is also asked to complete a "manual step." The page instructs the user to go to Spotlight on their Mac and search for the Terminal app. They are then instructed to paste a provided code into Terminal and hit return.

This code delivers Infiniti Stealer to the target's Mac.

"Because the user runs the command directly, many traditional defenses are bypassed," Malwarebytes says in its report. "There’s no exploit, no malicious attachment, and no drive‑by download."

According to Malwaybytes, the malware that's delivered to the victim's Mac is written in Python but compiled with Nuitka, which creates a native macOS binary. This makes Infiniti Stealer much more difficult to analyze and detect than the more typical type of malware.

"To our knowledge, this is the first documented macOS campaign combining ClickFix delivery with a Nuitka-compiled Python stealer," Malwarebytes says.

Once Infiniti Stealer is installed on a device, it will attempt to steal data from the victim's Mac and upload that information to the attacker's own server. Passwords, screenshots, browser data like cookies, and other sensitive information can be stolen from victims in these types of malware attacks.

Be aware of malware threats

Users should always be careful when following instructions from a website that they are unfamiliar with. Even then, users should be careful they are on a legitimate website of a company they do recognize and not a phishing website run by a bad actor.

Users should be aware that there is no form of captcha or verification that requires code to be entered in the Terminal app.

Furthermore, I typically recommend that anyone who isn't somewhat familiar with code to avoid any process that requires entering code in their Mac's Terminal.

If a user believes they may have been infected with malware, Malwarebytes recommends that they stop using the affected computer. They should change their account passwords on a completely separate device and, if possible, revoke access from the infected computer.

Infiniti Stealer appears to follow a new trend of bad actors targeting Apple devices due to the incorrect perception that they are immune from viruses and other types of attacks. DarkSword, for example, is another new threat targeting iPhones and other iOS devices with a malware attack that doesn't even require a user to download any sort of malicious file.

Tech

Amazons sister site is having a one-day sale, and this Bissell TurboClean deal is too good to skip

Published

2 minutes ago

April 4, 2026

Vicky

A woman using the Bissell TurboClean Cordless Hard Floor Cleaner Mop and Lightweight Wet/Dry Vacuum.

GET 25% OFF: Today only, add one or more Main Woot and/or Category Daily Deals to your cart to score 25% off your order subtotal.

Credit: Woot

Get 25% off at Woot

Use code 25OFF at checkout

If you haven't heard of Woot yet, I highly recommend checking it out. The website isn't as sleek or user-friendly as its parent company (which is Amazon, BTW), but if you're willing to do a little digging, you'll find tons of deals on things Amazon hasn't even discounted yet.

Today only, you can get 25% off your order subtotal just by adding one or more Main Woot and/or Category Daily Deals to your cart. All you have to do is enter the promo code 25OFF on the final checkout screen right before you hit the "Place order" button. It's super easy, but you have to act fast because the promotion ends tonight, April 3, 2026, at 11:58 p.m. CT.

Whether you're looking to upgrade your home or just stock up on everyday essentials, the eligible categories have a little bit of everything, including Amazon Kindles, DeWalt flashlights, and the "Grocery and Beauty Palooza."

But my favorite find is on the Bissell TurboClean Cordless Wet/Dry Vac (which is basically a must-have if you have messy pets). Right now, you can get it at Amazon for $281.72, but Woot has it listed as a daily deal for $93.99. When you apply the 25OFF promo code, the price drops to around $70. That's an unbeatable steal for a cordless vacuum with a 30-minute run time and a self-cleaning cycle.

Tech

The best smartwatch youve never heard of is on sale for less than $50

Published

2 minutes ago

April 4, 2026

Vicky

Nothing CMF Watch 3 Pro in light green with blue and green abstract background

SAVE $54: As of April 3, the Nothing CMF Watch 3 Pro is on sale at Woot! (an Amazon company) for only $44.99. That's $54.01 or 55% off its list price of $99 and the cheapest we've ever seen it.

Credit: Nothing

Nothing CMF Watch 3 Pro

$44.99
at Woot

$99
Save $54.01

In a world of expensive Apple watches, the CMF Watch 3 Pro is a delightfully affordable and surprisingly fantastic alternative. It was one of Mashable's favorite smartwatches of 2025 and earned a near-perfect rating in our testing. It's an excellent value at full price (just $99), but on sale for under $50, it's an absolute steal.

As of April 3, you can grab the Nothing CMF Watch 3 Pro at Woot! (an Amazon company) for only $44.99 instead of $99. That's 55% in savings and its best price ever. Just last week, we saw the smartwatch drop to $69 in Amazon's Big Spring Sale. This beats that sale price by an extra $24. The only catch? You'll have to go with the light green colorway. Though, honestly, I think that's the best choice anyway.

Mashable Contributor Lauren Allain tested the watch last fall and still wears it every day. She writes that it "looks, feels, and functions like a smartwatch that costs hundreds more." It offers loads of features like stress tracking, blood oxygen monitoring, precise heart-rate monitoring, dual-band GPS tracing, and in-depth sleep tracking, but where it truly outshines the competition is in battery power. As Allain puts it, "it just would not die." She had to turn on extra features to wear this thing down; it finally died after 16 days. That blows Apple's single day of battery life out of the water.

If you're in the market for a new smartwatch, fitness tracker, or sleep tracker, the CMF Watch 3 Pro does all three beautifully — and for less than $50 if you act fast.

Tech

Age-verification is hurting sex educators and sex workers, studies suggest

Published

2 minutes ago

April 4, 2026

Vicky

pixelated image of two men embracing with age gate in front of it

Experts have warned about how age verification laws will impact people's work and bank accounts — and now preliminary research suggests that they're right.

Age verification laws vary by state and country, but usually require submitting proof of age, be it a facial scan or uploading a government ID, to view potentially adult content. Since 2022, these laws have been enacted in different U.S. states. Other countries, such as the UK, have also instituted age verification via the Online Safety Act.

SEE ALSO:

How to unblock Pornhub for free

Sexual freedom nonprofit, the Woodhull Freedom Foundation, found that around one in five sex educators (18 percent) say these laws have already impacted their work. For sex educators working in states with age verification mandates, one in three (33 percent) report this.

Approximately 60 respondents completed the survey last month, so this isn't a wide sample, but it hints at the trickle-down effects of age verification.

"Age-verification laws are already impacting sex education in the U.S.," says Woodhull president and CEO, Ricci Joy Levy, in a press release.

The majority of sex educators surveyed, 73 percent, are concerned that these laws will impact their work, while 76 percent fear they could be used to restrict access to sex education and related resources. As it is, only 37 percent of U.S. states require school sex education to be medically accurate, according to Boston University.

"Again and again, we were told this was only about keeping minors from accessing porn," Levy's statement continues. "Woodhull warned these vague and overly broad policies would also result in censorship of vital, non-explicit information about sex and gender, and the data bear this out. The current age-verification protocols are ripe for abuse, and educators are right to be scared."

Separate research from adult industry research firm SWR Data hints at a similar story when it comes to adult creators. Nearly half (45.2 percent) of the 500 surveyed last fall reported that their income from adult work decreased in the past year, with two-thirds (63 percent) saying it got harder to earn money in the past year as well.

There are several possible reasons for this trend, including overall socioeconomic uncertainty, but a staggering 98 percent of creators who reported lower income said they've experienced difficulties related to the "War on Porn."

The so-called War on Porn can refer to age verification as well as other attempts to remove adult content from the internet. Project 2025, the blueprint for President Trump's second term, calls for an outright ban on pornography and imprisoning its creators. In 2024, one of the co-writers of Project 2025, Russell Vought (now the director of the Office of Management and Budget), reportedly called age verification the "back door" to a porn ban.

The majority of surveyed adult creators who lost income also reported increased social media censorship and increased restrictions on what they can sell, and even fans are having trouble accessing their content.

The latter point — trouble with access — especially affected adult creators in U.S. and UK markets, according to SWR Data. They're also dealing with piracy, showing that viewers are finding ways to work around age verification.

Two separate studies last year suggested that age verification laws don't work to keep children off of porn sites. Reasons include VPN usage and going to non-compliant websites. But it appears that age-verification is working to hurt sex workers and sex educators.