Back Cybersecuritynews

Fake Cloudflare CAPTCHA Pages Spread Infiniti Stealer Malware on macOS Systems

Cybersecuritynews •Tushar Subhra Dutta • March 27, 2026

A new macOS malware that was undocumented previously, is quietly tricking users through fake Cloudflare human verification pages. Called Infiniti Stealer, this threat uses a well-known social engineering trick called ClickFix to convince Mac users into running dangerous commands directly on their own machines, bypassing the need for any software vulnerability or exploit. For a […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ClickFix Attack Wave Targets Windows Users with StealC Malware A new social engineering campaign named ClickFix is targeting Windows users by presenting fake CAPTCHA verification pages. Victims are led to compromised websites that display fraudulent Cloudflare security checks, tricking them into executing malicious PowerShell commands to deploy the StealC information stealer malware. 193 sources 35

Extracted Entities

Fake Cloudflare CAPTCHA Pages Spread Infiniti Stealer Malware on macOS Systems

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (1)

Platforms (1)