Fake Cloudflare CAPTCHA

Infiniti Stealer: a new macOS infostealer using ClickFix and Python/Nuitka

| | macos, SBN News, Threat Intel
A new macOS infostealer, NukeChain (now Infiniti Stealer), uses fake CAPTCHA pages to trick users into running malicious commands ...
Huntress, Microsoft Detail the Continued Popularity, Evolution of ClickFix Attacks

Huntress, Microsoft Detail the Continued Popularity, Evolution of ClickFix Attacks

ClickFix, an attack technique used to trick victims into pasting or clicking on malicious commands, has rapidly become a favorite method of threat groups. Recent reports by Huntress, Microsoft, and Intego detail ...
Security Boulevard

Get A Day’s Schedule From Fantastical On The Command Line With Shortcuts

| | macos, programming
I use Fantastical as it’s a much cleaner and native interface than Google Calendar, which I’m stuck using. I do like to use the command line more than GUIs and, while I ...
Sevco, Apple, DMA, EU, A green worm on a juicy red apple

Apple M-Series FAIL: GoFetch Flaw Finds Crypto Keys

GoFAIL: Researchers worm their way into broken cache-filling microcode in most Macs and iPads ...
Security Boulevard

Deleting Duplicate Notes in Notes.app using AppleScript

| | applescript, macos, notes
I found myself digging through my Notes.app the other day and, lo and behold, there was a whole bunch of duplicate notes hanging around. Pretty sure I goofed and imported them twice ...
macOS malware cracked software trojan

Trojan Malware Hidden in Cracked macOS Software, Kaspersky Says

Newly discovered cracked applications being distributed by unauthorized websites are delivering Trojan-Proxy malware to macOS users who are looking for free or cheap versions of the software tools they want. The malware ...
Security Boulevard

Sort emails by year, using AppleScript

| | Apple, applescript, macos
So, way back when I was using Thunderbird, I had this awesome plugin that organized my archived emails by year. It was super handy for finding stuff or just taking a trip ...
U.S., Korea, North Korea cyberespionage nuclear weapons

N. Korean Threat Groups Mixing Tactics to Evade Detection

Researchers with Google-owned Mandiant last month wrote about increasing collaboration among North Korea-supported threat groups as one indication of a larger evolution of the regime’s offensive cyber program. The half-dozen or so ...
Security Boulevard
A closeup of an iPhone, lying screen down on a table

#iLeakage: All Apple CPUs Vulnerable — No Patch in Sight

Son of Spectre: No fix for iOS, “unstable” workaround for macOS ...
Security Boulevard