New Infinity Stealer malware grabs macOS data via ClickFix lures

Malwarebytes reports a macOS-targeting campaign delivering Infinity Stealer via a ClickFix lure that tricks users into pasting a base64-encoded curl command into Terminal; the payload is a Python infostealer compiled with Nuitka into a native Mach-O binary to evade analysis. The stealer performs anti-analysis checks and harvests browser credentials, Keychain entries, crypto wallets, screenshots and developer secrets, exfiltrating data over HTTP to a C2 and sending notifications to attackers via Telegram.