New Infinity Stealer malware grabs macOS data via ClickFix lures
Infinity Stealer is a new information-stealing malware that targets macOS systems. It uses the open-source Nuitka compiler to package its Python payload as an executable.
The ClickFix approach is used in the attack to deceive users into running malicious code by delivering a phony CAPTCHA that imitates Cloudflare's human verification check. According to Malwarebytes researchers, this is the first known macOS campaign that combines ClickFix distribution with a Python-based infostealer that was developed using Nuitka.
The executable that results from Nuitka's compilation of the Python script into C code is more resilient to static analysis because it creates a native binary. It is more elusive than PyInstaller, which combines Python with bytecode, since it generates a true native bina...

