Mac users, beware! Fake Cloudflare CAPTCHAs are spreading Infiniti Stealer malware. Stay vigilant and avoid executing unexpected commands. #CyberSecurity #MacOS #InfinitiStealer Link: thedailytechfeed.com/mac-users-ta...

Cloudflare-Themed ClickFix Attack Drops Infiniti Stealer on Macs Malwarebytes reports a macOS-targeted ClickFix campaign that lures victims to paste and run a Cloudflare-themed Terminal command which downloads a Bash script that deploys a Nuitka-compiled loader and the Infiniti Stealer information stealer. The Python-based stealer harvests browser credentials, Keychain items, crypto wallets, developer secrets and screenshots, exfiltrates data to a...

A new macOS attack uses a fake Cloudflare page to trick users into pasting a Terminal command that downloads a Bash script deploying Infiniti Stealer, harvesting sensitive data including browser creds and crypto wallets. #InfinitiStealer #MacOSAttack

Infiniti Stealer: a new macOS infostealer using ClickFix and Python/Nuitka Infiniti Stealer is a previously undocumented macOS infostealer delivered via a ClickFix social‑engineering scheme that tricks users into pasting a Terminal command to fetch a Bash dropper and ultimately runs a Nuitka‑compiled Python stealer. The malware decodes and executes staged payloads, removes quarantine flags, harvests browser credentials, Keychain entries, wallets, and...

Infiniti Stealer targets macOS using a fake Cloudflare page to trick users into running a Bash dropper. It steals browser creds, Keychain data, wallets, and dev secrets, exfiltrating via HTTP and notifying via Telegram. #InfinitiStealer #MacOSMalware