How to remove Infiniti from infected macOS

What kind of malware is Infiniti?

Infiniti is an information stealer targeting macOS users. Cybercriminals were observed distributing it via ClickFix, a deceptive social engineering technique. Infiniti is designed to steal various information, including browser credentials, Keychain entries, and cryptocurrency wallet data. If detected, Infiniti should be removed immediately.

Infiniti stealer overview

Infiniti stealer can collect a wide range of sensitive data from compromised macOS systems. It is capable of extracting saved login credentials (e.g., usernames or email addresses and passwords) from Chromium-based browsers and Firefox. Also, it is capable of retrieving entries stored in the macOS Keychain and locating cryptocurrency wallet information.

It also targets developer-related files, such as .env configurations, which often contain data like API keys, authentication tokens, and other credentials. Moreover, the malware captures screenshots. All collected data is transmitted to a remote server controlled by the threat actors using HTTP POST requests.

It is important to note that before starting its data exfiltration, Infiniti checks the system environment to determine whether it is being analyzed. It attempts to detect popular sandbox and virtualization platforms, including Any.Run, Joe Sandbox, Hybrid Analysis, VMware, and VirtualBox. If such environments are found, the malware may alter its behavior to avoid detection.

Additionally, the stealer can bypass automated security systems, which makes it more difficult for analysts and security tools to detect. Overall, victims of these attacks can encounter issues such as account hijacking, monetary loss, identity theft, and other problems.

Conclusion

Overall, Infiniti stealer is a serious threat because it can steal various sensitive information while avoiding detection. Because it operates quietly, it can be difficult to detect and remove. If there is a reason to believe that a device is infected with Infiniti, the malware should be eliminated as soon as possible.

More examples of malware targeting macOS are notnullOSX, Ultimate, and Miolab.

How did Infiniti infiltrate my device?

Infiniti stealer is distributed through a social engineering technique known as ClickFix. Users are redirected to a fake verification page (often disguised as a CAPTCHA) that instructs them to copy and paste a command into the macOS Terminal to continue. When the user runs this command, it silently downloads and executes the malware on the system.

It is worth noting that pirated software (and cracking tools or key generators), technical support scams, malicious advertisements, software vulnerabilities, P2P networks, fake websites (or compromised sites), are also commonly used to deliver malware.

How to avoid malware?

Be careful when browsing - avoid clicking pop-ups, ads, or other suspicious content encountered on shady sites, and never allow questionable pages to send notifications. Also, be cautious when dealing with emails, especially unexpected messages from unknown senders, and do not open any included links or attachments.

Make sure your operating system and applications are regularly updated. Also, only download software from official sources or trusted app stores, and avoid using pirated programs, cracks, or key generators. If your computer is already infected, we recommend running a scan with Combo Cleaner Antivirus for Windows to automatically eliminate all threats.

Infiniti delivered using ClickFix (source: malwarebytes.com):

Instant automatic malware removal:

Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:

By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.

Quick menu:

• What is Infiniti?
• Remove Infiniti related files and folders from OSX.

Video showing how to remove adware and browser hijackers from a Mac computer:

Unwanted applications removal:

Remove potentially unwanted applications from your "Applications" folder:

Click the Finder icon. In the Finder window, select "Applications". In the applications folder, look for "MPlayerX","NicePlayer", or other suspicious applications and drag them to the Trash. After removing the potentially unwanted application(s) that cause online ads, scan your Mac for any remaining unwanted components.

Frequently Asked Questions (FAQ)

My device is infected with Infiniti malware, should I format my storage device to get rid of it?

While this option ensures Infiniti is completely removed, it also erases everything on the device. It is usually recommended to attempt cleaning the system with a reliable tool like Combo Cleaner before doing so.

What are the biggest issues that malware can cause?

Malicious software (depending on its type) can be capable of encrypting files, delivering other unwanted programs, or stealing private information. These actions may lead to various negative outcomes such as financial losses, identity theft, compromised accounts or systems, and permanent data loss.

What is the purpose of Infiniti?

The purpose of Infiniti Stealer is to collect sensitive information from infected macOS devices. It steals data such as login credentials, browser data, information from cryptocurrency wallets, and developer-related data.

How did Infiniti infiltrate my computer?

Infiniti typically infiltrates a computer through a social engineering trick called ClickFix. A user is redirected to a fake verification page and is instructed to copy and run a malicious command in the macOS Terminal. Once executed, this command downloads and deploys the malware on the system.

Will Combo Cleaner protect me from malware?

Yes, Combo Cleaner is capable of detecting and removing threats. However, more sophisticated malware can sometimes evade detection by concealing itself within the system. For this reason, running a full system scan is highly recommended.