macOS 26.4 Warns Against Terminal-Based Malware Attacks

ByMike Moffit

We’ve warned before about scams that trick users into pasting malicious commands into Terminal. Attackers create fake CAPTCHA pages—often resembling Cloudflare’s “are you a human” tests—that instruct visitors to open Terminal, paste a command, and press Return. Because the user executes the command themselves, macOS’s security protections are bypassed. Malwarebytes recently documented a macOS infostealer called Infiniti Stealer that spreads this way, stealing Keychain passwords, browser credentials, and cryptocurrency wallets. These attacks have become common enough that Apple has added a warning in macOS 26.4 Tahoe that appears when a user pastes a potentially dangerous command from Safari into Terminal. The protection is still in its early days—in our testing, the warning dialog appeared only once, with subsequent attempts producing only a beep. Worse, if you allow the first paste, Terminal keeps allowing pastes without further warnings. It’s a step in the right direction, but don’t count on it yet. The core advice remains: never paste commands into Terminal from websites unless you trust the site and fully understand what it does. No legitimate CAPTCHA ever requires Terminal commands!

(Featured image by iStock.com/thomaguery)

Social Media: Fake CAPTCHAs that trick users into pasting malware commands into Terminal are now common enough that Apple added a warning in macOS 26.4 Tahoe. Remember: no legitimate verification ever requires Terminal commands!

Similar Posts

  • Medgar Evers

    Medgar Evers (1925-1963) was an African-American civil rights activist whose murder drew national attention. Born in Mississippi, he served in World War II before going to work for the National Association for the Advancement of Colored People (NAACP). After applying to the segregated University of Mississippi Law School in 1954, he became the NAACP field secretary in Mississippi.

    As early as 1955, Evers activism made him the most visible civil rights leader in the state of Mississippi. As a result, he and his family were subjected to numerous threats and violent actions over the years, including a firebombing of their house in May 1963. At 12:40 a.m. on June 12, 1963, Evers was shot in the back in the driveway of his home in Jackson. He died less than a hour later at a nearby hospital. The accused killer Byron De La Beckwith initially escaped conviction.

    In December 1990, Beckwith was again indicted for the murder of Medgar Evers. After a number of appeals, the Mississippi Supreme Court finally ruled in favor of a third trial in April 1993. Ten months later, testimony began before a racially mixed jury of eight blacks and four whites. In February 1994, nearly 31 years after Evers’ death, Beckwith was convicted and sentenced to life in prison.