macOS 26.4 Warns Against Terminal-Based Malware Attacks

We’ve warned before about scams that trick users into pasting malicious commands into Terminal. Attackers create fake CAPTCHA pages—often resembling Cloudflare’s “are you a human” tests—that instruct visitors to open Terminal, paste a command, and press Return. Because the user executes the command themselves, macOS’s security protections are bypassed. Malwarebytes recently documented a macOS infostealer called Infiniti Stealer that spreads this way, stealing Keychain passwords, browser credentials, and cryptocurrency wallets. These attacks have become common enough that Apple has added a warning in macOS 26.4 Tahoe that appears when a user pastes a potentially dangerous command from Safari into Terminal. The protection is still in its early days—in our testing, the warning dialog appeared only once, with subsequent attempts producing only a beep. Worse, if you allow the first paste, Terminal keeps allowing pastes without further warnings. It’s a step in the right direction, but don’t count on it yet. The core advice remains: never paste commands into Terminal from websites unless you trust the site and fully understand what it does. No legitimate CAPTCHA ever requires Terminal commands!

(Featured image by iStock.com/thomaguery)


Social Media: Fake CAPTCHAs that trick users into pasting malware commands into Terminal are now common enough that Apple added a warning in macOS 26.4 Tahoe. Remember: no legitimate verification ever requires Terminal commands!

Similar Posts

  • Hey Siri, What Can You Do?

    So, I am a little embarrassed to admit it but I bought an Amazon Echo to check out how Alexa compares with Siri. I’m a gadget guy so we will see if we find it useful and if not, I am sure I can find it a home on eBay. I use Siri more and more these days. My most common uses are asking her to settle trivia disputes with Grace or setting the timer for 5 minutes. But there is a lot more that Siri can do!

    Make Relationships with Siri
    When you speak Siri commands, you can refer to people by relationship, rather than name. So, if you want to call your father, you can say “call my father” instead of saying “call Bruce Leibowitz.” But to do this, you need to introduce Siri to your family. First, make sure you have a “card” in the Contacts app for yourself, and then go into Settings > Mail, Contacts, Calendars, scroll down to find and tap My Info, and select your card. Next, make sure you have a contact card for your father, and then tell Siri, “Bruce Leibowitz is my father.” Or, if Siri doesn’t hear you correctly, open Contacts, edit your card (not your father’s!), scroll down, tap “add related name,” tap the default relationship to pick “father,” tap the info “i” icon, select your father’s card, and tap Done.

    You can even use Siri to remember other types of relationships. Artie used to bring manure from his uncle’s farm for my garden and ended up with the nickname, “the spreader”. If I tell Siri “Art Hendrickson is my spreader” I can now just say “text my spreader…” and Siri knows who I am talking about. This works for nicknames but also for lawyers, accountants, doctors or any nickname you want to tell Siri about.

    Take a Picture
    Instead of fumbling to launch the Camera app on your iPhone you can just say “take a picture” and Siri will automatically open the Camera app and you can snap away.

    Siri Converts
    Need to know how many millimeters are in 4 inches? Just ask Siri and you will find that there are 101.6 mm in 4 inches. This works for currency exchange rates, too. Ask Siri how many Euros are equal to $100US you will find that 87.73 Euros is the exchange rate today. Siri has some other strong calculation features too. You can ask Siri how many calories there are in that fish sandwich or to calculate a 20% tip on your restaurant bill. You can ask her to solve math problems involving fractions and other math functions that will be faster than opening the calculator app and punching in the numbers.

    Settling Up
    Okay you can use Siri to look up baseball stats or other information to settle a dispute but what if you are at loggerheads and just want to get a random answer and don’t have a coin to flip. You can ask Siri to “roll the dice”, “flip a coin” or pick a random number.

    Name that Tune
    Siri is integrated with Shazam to help you figure out what song is playing. Just ask her “what song is playing?” and she will listen and let you know and probably try to sell you the song, too!

    Find that Photo
    Siri can search your photo library for you. I know how frustrating it is if your are like me and have literally thousands of photos. You can say something like “find that photo from Daytona Beach from last March” and Siri will launch Photos and take you right to any photos taken at that place and time.

    Siri Takes You Out
    Siri can make your restaurant reservations for you, too! Tell Siri “make a restaurant reservation for four at 7PM” and she will respond with available restaurants nearby and if you have the Open Table app installed can make the reservation for you or give you the phone number to call.

    Are We There Yet?
    If you are using your iPhone for navigation you can just say “ETA” and Siri will let you know how much longer you are gonna be on the road.

    Leave Me Alone
    Siri can do a lot for you but sometimes you just want alone time. You can tell Siri to turn on “do not disturb” and you will not be bothered. Or tell her to “turn on airplane mode” and she will turn off Wi-Fi and cellular signals.

  • The Best Apple-Related Gifts for 2021

    It may seem early to start thinking about the holiday shopping season, but with the global supply chain suffering pandemic-related slowdowns, there’s no…

  • B.B. King – The King of the Blues

    For more than half a century, Riley B. King – better known as B.B. King – defined the blues for a worldwide audience. Since he started recording in the 1940s, he has released over fifty albums, many of them classics. He was born September 16, 1925, on a plantation in Itta Bena, Mississippi, near Indianola. In his youth, he played on street corners for dimes, and would sometimes play in as many as four towns a night. In 1947, he hitchhiked to Memphis, TN to pursue his music career. Memphis was where every important musician of The South gravitated, and it supported a large musical community where every style of African American music could be found. B.B. stayed with his cousin Bukka White, one of the most celebrated blues performers of his time, who schooled B.B. further in the art of the blues.

    B.B.’s first big break came in 1948 when he performed on Sonny Boy Williamson’s radio program on KWEM out of West Memphis. This led to steady engagements at the Sixteenth Avenue Grill in West Memphis, and later to a ten-minute spot on black-staffed and managed Memphis radio station WDIA. “King’s Spot,” became so popular, it was expanded and became the “Sepia Swing Club.” Soon B.B. needed a catchy radio name. What started out as Beale Street Blues Boy was shortened to Blues Boy King, and eventually B.B. King.

    In the mid-1950s, while B.B. was performing at a dance in Twist, Arkansas, a few fans became unruly. Two men got into a fight and knocked over a kerosene stove, setting fire to the hall. B.B. raced outdoors to safety with everyone else, then realized that he left his beloved $30 acoustic guitar inside, so he rushed back inside the burning building to retrieve it, narrowly escaping death. When he later found out that the fight had been over a woman named Lucille, he decided to give the name to his guitar to remind him never to do a crazy thing like fight over a woman. Ever since, each one of B.B.’s trademark Gibson guitars has been called Lucille.

    B.B. was inducted into the Blues Foundation Hall of Fame in 1984 and into the Rock and Roll Hall of Fame in 1987. He received NARAS’ Lifetime Achievement Grammy Award in 1987, and has received honorary doctorates from Tougaloo(MS) College in 1973; Yale University in 1977; Berklee College of Music in 1982; Rhodes College of Memphis in 1990; Mississippi Valley State University in 2002 and Brown University in 2007. In 1992, he received the National Award of Distinction from the University of Mississippi.

    B.B. King came to Vermont many times and I had the pleasure of being at several of his concerts. He died last year at the age of 90 and was performing to sold out crowds right up until he died. B.B. King is gone but the –The Thrill is Gone- lives forever.