Malware Activity
How Social Engineering and Supply‑Chain Threats Are Targeting macOS and Developers
Recent security research highlights a growing wave of attacks that rely on deception and trust, rather than traditional software vulnerabilities, to compromise macOS users and developers. One campaign, known as Infinity (or Infiniti) Stealer, uses fake Cloudflare‑style CAPTCHA pages to trick Mac users into pasting commands into the Terminal, which silently installs data‑stealing malware. Once running, the malware disguises itself as a legitimate macOS application and quietly collects sensitive information such as browser passwords, macOS Keychain data, cryptocurrency wallets, screenshots, and secrets stored in developer files. At the same time, a separate software supply‑chain attack targeted developers by compromising the popular Telnyx Python package on PyPI, embedding malware that activates automatically when the library is imported. To evade detection, attackers hid malicious code
