Home / Technology / macOS Hit by New Infiniti Stealer Malware
macOS Hit by New Infiniti Stealer Malware
30 Mar
Summary
- New Infiniti Stealer malware targets macOS users.
- Victims are tricked into running malicious Terminal code.
- Malware steals credentials, Keychain data, and screenshots.
Security researchers have identified a new and concerning malware campaign targeting macOS devices, identified as Infiniti Stealer. This infostealer is distributed through a social engineering tactic known as a ClickFix attack, which lures users into believing they need to update software or fix an issue.
Users are directed to a malicious website, where they are prompted to open Terminal and paste a specific command. Executing this command allows the malware dropper to deliver Infiniti Stealer, effectively bypassing standard security measures as the user initiates the malicious action.
What makes Infiniti Stealer particularly noteworthy is its compilation method. Written in Python, it has been compiled using Nuitka, a compiler that transforms Python code into native macOS binaries. This compilation process makes the malware more difficult to analyze and detect compared to typical Python-based threats.
The Infiniti Stealer is capable of exfiltrating a wide array of sensitive information. This includes credentials from popular browsers like Chrome and Firefox, data stored in macOS Keychain, cryptocurrency wallet details, and any screenshots taken while the malware is active on the system. It also targets plaintext secrets found in developer files.
