Connect with us

Tech

Everything you need to know about the malware stealing data from Mac users

Published

on

MacBook in the dark using Terminal

Mac users have a new malware threat to be on the watch out for.

According to a new report by Malwarebytes, Infiniti Stealer is a new malware attack targeting Mac users that utilizes social engineering tactics and, once the payload is delivered to the device, is very difficult to detect.

Infiniti Stealer

The hacker's campaign, according to the report, begins with a social engineering technique known as ClickFix. ClickFix is a tactic that tricks the target themself into executing malicious code on their computer.

The targeted user is presented with a website, often through a phishing email or a pop-up on a compromised page, with an urgent update warning that claims to require the user to complete a Cloudflare human verification captcha.

The target is presented with a traditional "I am not a robot" box to check. However, the target is also asked to complete a "manual step." The page instructs the user to go to Spotlight on their Mac and search for the Terminal app. They are then instructed to paste a provided code into Terminal and hit return.

This code delivers Infiniti Stealer to the target's Mac.

"Because the user runs the command directly, many traditional defenses are bypassed," Malwarebytes says in its report. "There’s no exploit, no malicious attachment, and no drive‑by download."

According to Malwaybytes, the malware that's delivered to the victim's Mac is written in Python but compiled with Nuitka, which creates a native macOS binary. This makes Infiniti Stealer much more difficult to analyze and detect than the more typical type of malware.

"To our knowledge, this is the first documented macOS campaign combining ClickFix delivery with a Nuitka-compiled Python stealer," Malwarebytes says.

Once Infiniti Stealer is installed on a device, it will attempt to steal data from the victim's Mac and upload that information to the attacker's own server. Passwords, screenshots, browser data like cookies, and other sensitive information can be stolen from victims in these types of malware attacks.

Be aware of malware threats

Users should always be careful when following instructions from a website that they are unfamiliar with. Even then, users should be careful they are on a legitimate website of a company they do recognize and not a phishing website run by a bad actor.

Users should be aware that there is no form of captcha or verification that requires code to be entered in the Terminal app.

Furthermore, I typically recommend that anyone who isn't somewhat familiar with code to avoid any process that requires entering code in their Mac's Terminal.

If a user believes they may have been infected with malware, Malwarebytes recommends that they stop using the affected computer. They should change their account passwords on a completely separate device and, if possible, revoke access from the infected computer.

Infiniti Stealer appears to follow a new trend of bad actors targeting Apple devices due to the incorrect perception that they are immune from viruses and other types of attacks. DarkSword, for example, is another new threat targeting iPhones and other iOS devices with a malware attack that doesn't even require a user to download any sort of malicious file.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

How to watch Austria vs. Ghana online for free

Published

on

By

Antoine Semenyo of Ghana poses

TL;DR: Live stream Austria vs. Ghana in a 2026 International Friendly for free on ORF. Access this free streaming site from anywhere in the world with ExpressVPN.


There are an incredible number of top International Friendlies taking place this week. We're being spoilt with Brazil vs. France, Colombia vs. Croatia, and a string of other high-profile contests. Austria vs. Ghana is not the biggest game on the schedule, but we're still making time to watch this interesting matchup.

If you want to watch Austria vs. Ghana in a 2026 International Friendly for free from anywhere in the world, we have all the information you need.

When is Austria vs. Ghana?

Austria vs. Ghana kicks off at 1 p.m. ET on March 27. This fixture takes place at the Ernst-Happel-Stadion.

How to watch Austria vs. Ghana for free

Austria vs. Ghana is available to live stream for free on ORF.

ORF is geo-restricted to Austria, but anyone can access this free streaming service with a VPN. These tools can hide your real IP address (digital location) and connect you to a secure server in Austria, meaning you can access free live streams on ORF from anywhere in the world.

Lve stream Austria vs. Ghana for free by following these simple steps:

  1. Subscribe to a streaming-friendly VPN (like ExpressVPN)

  2. Download the app to your device of choice (the best VPNs have apps for Windows, Mac, iOS, Android, Linux, and more)

  3. Open up the app and connect to a server in Austria

  4. Visit ORF

  5. Stream Austria vs. Ghana for free from anywhere in the world


ExpressVPN logo

Credit: ExpressVPN

$12.99 only at ExpressVPN (with money-back guarantee)

The best VPNs for streaming are not free, but most do offer free-trials or money-back guarantees. By leveraging these offers, you can watch Austria vs. Ghana without actually spending anything. This clearly isn't a long-term solution, but it does give you enough time to stream select games before recovering your investment.

If you want to retain permanent access to free streaming sites from around the world, you'll need a subscription. Fortunately, the best VPN for streaming live sport is on sale for a limited time.

What is the best VPN for ORF?

ExpressVPN is the best choice for bypassing geo-restrictions to stream live sport on ORF, for a number of reasons:

  • Servers in 105 countries including Austria

  • Easy-to-use app available on all major devices including iPhone, Android, Windows, Mac, and more

  • Strict no-logging policy so your data is secure

  • Fast connection speeds free from throttling

  • Up to eight simultaneous connections

  • 30-day money-back guarantee

A two-year subscription to ExpressVPN is on sale for $68.40 and includes an extra four months for free — 81% off for a limited time. This plan includes a year of free unlimited cloud backup and a generous 30-day money-back guarantee. Alternatively, you can get a one-month plan for just $12.99 (with money-back guarantee).

Live stream Austria vs. Ghana for free with ExpressVPN.

Continue Reading

Tech

Hackers are exploiting a vulnerability in lots of e-commerce sites

Published

on

By

Fish-eye lens view of a computer screen with hacking stuff on it

Hackers have found their way into a large number of internet e-commerce sites.

This latest cybersecurity threat targets web stores running on the Magento or Adobe Commerce platforms, according to BleepingComputer, which cited the security firm Sansec as first publicizing the exploit. That was just over a week ago, and since Sansec exposed the vulnerability, known as PolyShell, the firm claimed that 56 percent of vulnerable stores have been experienced attacks.

You can check out Sansec's analysis for the full technical details of what's going on, but in the simplest terms possible, it seems hackers have managed to insert a credit card skimmer into the API for Magento, an open-source e-commerce platform acquired by Adobe several years ago. Sansec says it spotted the attack being used on an unnamed "major car manufacturer."

We have contacted Adobe for comment and will update this story if they respond.

Adobe has released a fix for this in the beta branch of its software, but that doesn't help the presumably vast majority of sites running the non-beta version of the software. Until the fix goes public, this will be an issue for any site running Magento or Adobe Commerce.

Continue Reading

Tech

How to watch Czechia vs. Ireland online for free

Published

on

By

Republic of Ireland's Adam Idah celebrates

TL;DR: Live stream Czechia vs. Ireland in World Cup qualifiers for free on RTÉ Player. Access this free streaming site from anywhere in the world with ExpressVPN.


Some huge World Cup qualifiers are taking place this week, including Czechia vs. Ireland. The winner of this one-off semi final will face either Denmark or North Macedonia for a place in the 2026 World Cup. The Fortuna Arena is going to be absolutely electric when these two sides come together to battle it out for a place in this summer's showpiece event.

If you want to watch Czechia vs. Ireland in World Cup qualifiers for free from anywhere in the world, we have all the information you need.

When is Czechia vs. Ireland?

Czechia vs. Ireland in World Cup qualifiers kicks off at 3:45 p.m. ET on March 26. This fixture takes place at the Fortuna Arena.

How to watch Czechia vs. Ireland for free

Czechia vs. Ireland in World Cup qualifiers is available to live stream for free on RTÉ Player.

RTÉ Player is geo-restricted to Ireland, but anyone can access this free streaming service with a VPN. These tools can hide your real IP address (digital location) and connect you to a secure server in Ireland, meaning you can access free live streams on RTÉ Player from anywhere in the world.

Lve stream Czechia vs. Ireland for free by following these simple steps:

  1. Subscribe to a streaming-friendly VPN (like ExpressVPN)

  2. Download the app to your device of choice (the best VPNs have apps for Windows, Mac, iOS, Android, Linux, and more)

  3. Open up the app and connect to a server in Ireland

  4. Visit RTÉ Player

  5. Stream Czechia vs. Ireland for free from anywhere in the world


ExpressVPN logo

Credit: ExpressVPN

$12.99 only at ExpressVPN (with money-back guarantee)

The best VPNs for streaming are not free, but most do offer free-trials or money-back guarantees. By leveraging these offers, you can watch Czechia vs. Ireland in World Cup qualifiers without actually spending anything. This clearly isn't a long-term solution, but it does give you enough time to stream select World Cup qualifiers before recovering your investment.

If you want to retain permanent access to free streaming sites from around the world, you'll need a subscription. Fortunately, the best VPN for streaming live sport is on sale for a limited time.

What is the best VPN for RTÉ Player?

ExpressVPN is the best choice for bypassing geo-restrictions to stream live sport on RTÉ Player, for a number of reasons:

  • Servers in 105 countries

  • Easy-to-use app available on all major devices including iPhone, Android, Windows, Mac, and more

  • Strict no-logging policy so your data is secure

  • Fast connection speeds free from throttling

  • Up to eight simultaneous connections

  • 30-day money-back guarantee

A two-year subscription to ExpressVPN is on sale for $68.40 and includes an extra four months for free — 81% off for a limited time. This plan includes a year of free unlimited cloud backup and a generous 30-day money-back guarantee. Alternatively, you can get a one-month plan for just $12.99 (with money-back guarantee).

Live stream Czechia vs. Ireland in World Cup qualifiers for free with ExpressVPN.

Continue Reading

Trending