Tech
Everything you need to know about the malware stealing data from Mac users
Mac users have a new malware threat to be on the watch out for.
According to a new report by Malwarebytes, Infiniti Stealer is a new malware attack targeting Mac users that utilizes social engineering tactics and, once the payload is delivered to the device, is very difficult to detect.
Infiniti Stealer
The hacker's campaign, according to the report, begins with a social engineering technique known as ClickFix. ClickFix is a tactic that tricks the target themself into executing malicious code on their computer.
The targeted user is presented with a website, often through a phishing email or a pop-up on a compromised page, with an urgent update warning that claims to require the user to complete a Cloudflare human verification captcha.
The target is presented with a traditional "I am not a robot" box to check. However, the target is also asked to complete a "manual step." The page instructs the user to go to Spotlight on their Mac and search for the Terminal app. They are then instructed to paste a provided code into Terminal and hit return.
This code delivers Infiniti Stealer to the target's Mac.
"Because the user runs the command directly, many traditional defenses are bypassed," Malwarebytes says in its report. "There’s no exploit, no malicious attachment, and no drive‑by download."
According to Malwaybytes, the malware that's delivered to the victim's Mac is written in Python but compiled with Nuitka, which creates a native macOS binary. This makes Infiniti Stealer much more difficult to analyze and detect than the more typical type of malware.
"To our knowledge, this is the first documented macOS campaign combining ClickFix delivery with a Nuitka-compiled Python stealer," Malwarebytes says.
Once Infiniti Stealer is installed on a device, it will attempt to steal data from the victim's Mac and upload that information to the attacker's own server. Passwords, screenshots, browser data like cookies, and other sensitive information can be stolen from victims in these types of malware attacks.
Be aware of malware threats
Users should always be careful when following instructions from a website that they are unfamiliar with. Even then, users should be careful they are on a legitimate website of a company they do recognize and not a phishing website run by a bad actor.
Users should be aware that there is no form of captcha or verification that requires code to be entered in the Terminal app.
Furthermore, I typically recommend that anyone who isn't somewhat familiar with code to avoid any process that requires entering code in their Mac's Terminal.
If a user believes they may have been infected with malware, Malwarebytes recommends that they stop using the affected computer. They should change their account passwords on a completely separate device and, if possible, revoke access from the infected computer.
Infiniti Stealer appears to follow a new trend of bad actors targeting Apple devices due to the incorrect perception that they are immune from viruses and other types of attacks. DarkSword, for example, is another new threat targeting iPhones and other iOS devices with a malware attack that doesn't even require a user to download any sort of malicious file.
It's moon flyby day, folks.
The Artemis II astronauts are expected to make history today as they reach distances no humans have ever traveled before on their journey around the moon.
The four-person crew — Christina Koch, Victor Glover, Reid Wiseman, and Jeremy Hansen — aboard the Orion spacecraft is scheduled to pass the distance record of 248,655 miles from Earth, set in 1970 by the Apollo 13, and continue on to 252,760 miles. In doing so, they'll be the first humans to see some parts of the far side of the moon in real time.
They won't be landing, but they will be gathering vital insights and data that will help NASA prepare for a future lunar landing in a couple of years' time. It's the most critical part of the 10-day mission, and you can tune into the historical event live.
Where to watch the Artemis II moon flyby livestream
NASA will provide live coverage of the historic lunar flyby on Monday, April 6, beginning at 1:00 p.m. ET. Fortunately, they won't gatekeep the livestream; you have plenty of options to tune in.
NASA+, the space agency's streaming service, will livestream the flyby, as well as the agency's YouTube channel and social media accounts. All of these options are completely free. Several streaming services are also hosting the NASA+ livestream on their platforms, if you prefer to watch there, including Netflix and Peacock.
Credit: NASA
While coverage starts at 1:00 p.m. ET, the flyby itself isn't expected until around 2:45 p.m. ET. NASA has outlined key lunar flyby times and milestones, but they are subject to change based on real-time operations. The crew will surpass the record for humans' farthest distance from Earth around 1:56 p.m. ET, and audio-only remarks from the astronauts will begin shortly after.
Want more science and tech news delivered straight to your inbox? Sign up for Mashable's Light Speed newsletter today.
Save $151.99: As of April 6, the Sony WH-1000XM5 headphones are down to just $248 at Amazon. The 38% discount on their $399.99 list price puts them just $5 away from their record-low price of $243.
Opens in a new window
Just because Amazon's Big Spring Sale ended last week doesn't mean you missed your opportunity to snag a great headphones deal ahead of Prime Day.
Prime example (no pun intended): the Sony WH-1000XM5 headphones are on sale at Amazon for $248, putting them just $5 away from their Spring Sale price (and lowest price ever) of $243. This deal also slashes $151.99 off their $399.99 price tag — and makes them a whopping $210 cheaper than the $458 WH-1000XM6 headphones.
Of course, the XM6 headphones are priced higher because they're newer. That said, I tested the XM5 and XM6 headphones head to head, and found that unless folding ear cups are a non-negotiable for you or the XM6s had a stellar sale, the XM5s remained the better value headphones. The noise-cancellation felt about on par with the newer headphones, and while the XM6s have slightly better sound and a better design, I wouldn't say it's the difference of $210.
The Sony XM5s hold up — that's why we still consider them one of the best in Sony's lineup.
Today's Connections: Sports Edition is for people who love college basketball.
As we've shared in previous hints stories, this is a version of the popular New York Times word game that seeks to test the knowledge of sports fans.
Like the original Connections, the game is all about finding the "common threads between words." And just like Wordle, Connections resets after midnight and each new set of words gets trickier and trickier — so we've served up some hints and tips to get you over the hurdle.
If you just want to be told today's puzzle, you can jump to the end of this article for the latest Connections solution. But if you'd rather solve it yourself, keep reading for some clues, tips, and strategies to assist you.
What is Connections: Sports Edition?
The NYT's latest daily word game has launched in association with The Athletic, the New York Times property that provides the publication's sports coverage. Connections can be played on both web browsers and mobile devices and require players to group four words that share something in common.
This Tweet is currently unavailable. It might be loading or has been removed.
Each puzzle features 16 words and each grouping of words is split into four categories. These sets could comprise of anything from book titles, software, country names, etc. Even though multiple words will seem like they fit together, there's only one correct answer.
If a player gets all four words in a set correct, those words are removed from the board. Guess wrong and it counts as a mistake — players get up to four mistakes until the game ends.
This Tweet is currently unavailable. It might be loading or has been removed.
Players can also rearrange and shuffle the board to make spotting connections easier. Additionally, each group is color-coded with yellow being the easiest, followed by green, blue, and purple. Like Wordle, you can share the results with your friends on social media.
Here's a hint for today's Connections: Sports Edition categories
Want a hint about the categories without being told the categories? Then give these a try:
-
Yellow: Stats
-
Green: Running a set
-
Blue: Winners
-
Purple: Perfect season
Here are today's Connections: Sports Edition categories
Need a little extra help? Today's connections fall into the following categories:
-
Yellow: Basketball Stats, In Singular Form
-
Green: Basketball Offenses
-
Blue: Championship-Winning Men's College Basketball Coaches
-
Purple: Men's College Basketball Teams to Complete Undefeated Season
Looking for Wordle today? Here's the answer to today's Wordle.
Ready for the answers? This is your last chance to turn back and solve today's puzzle before we reveal the solutions.
Drumroll, please!
The solution to today's Connections: Sports Edition #558 is…
What is the answer to Connections: Sports Edition today?
-
Basketball Stats, In Singular Form – BLOCK, MINUTE, STEAL, TURNOVER
-
Basketball Offenses – MOTION, PICK AND ROLL, PRINCETON, TRIANGLE
-
Championship-Winning Men's College Basketball Coaches – DREW, FISHER, SELF, WOODEN
-
Men's College Basketball Teams to Complete Undefeated Season – INDIANA, NORTH CAROLINA, SAN FRANCISCO, UCLA
Don't feel down if you didn't manage to guess it this time. There will be new sports Connections for you to stretch your brain with tomorrow, and we'll be back again to guide you with more helpful hints.
Are you also playing NYT Strands? See hints and answers for today's Strands.
If you're looking for more puzzles, Mashable's got games now! Check out our games hub for Mahjong, Sudoku, free crossword, and more.
Not the day you're after? Here's the solution to yesterday's Connections.
What the Class of 2026 Would Happily Give up for Job Security
Oracle Lays Off More Than 150 California Workers
From Resumes to Salary Negotiations, Here’s How Gen Z Workers Rely on Parents
SEND IN THE TROOPS! At Least 5 Dead, 10 Wounded So Far in Chicago Weekend Shootings
How I Paid Off My Mortgage 10 Years Early On A Teacher’s Salary
Black Lives Matter Activist in Boston Pleads Guilty to Federal Fraud Charges – Scammed Donors to Fund Her Lifestyle
-
Politics7 months agoSEND IN THE TROOPS! At Least 5 Dead, 10 Wounded So Far in Chicago Weekend Shootings
-
Business7 months ago
How I Paid Off My Mortgage 10 Years Early On A Teacher’s Salary
-
Politics6 months agoBlack Lives Matter Activist in Boston Pleads Guilty to Federal Fraud Charges – Scammed Donors to Fund Her Lifestyle
-
Tech7 months agoGet a lifetime subscription to the “ChatGPT for investors” for under $60
-
Tech7 months agoReview: The Dreame H15 Pro CarpetFlex is the first wet/dry vacuum I liked
-
Business7 months ago
25 Low-Effort Side Hustles You Can Start This Weekend
-
Business7 months ago
9 Ways to Command a Six-Figure Salary Without a Bachelor’s
-
Entertainment6 months agoFat Joe Recalls Bruno Mars Snapping on Him Over Question About Puerto Rican Roots: ‘Broke My Heart’