More Mac malware from Google search

Comments

• cmnybo@discuss.tchncs.de ⁨3⁩ ⁨weeks⁩ ago

  Wow, grabbing a base64 obfuscated URL with curl sending the output to bash is a huge red flag. I guess Mac users must not know anything about the CLI.

  Never pipe the output of curl or wget to bash. You can’t inspect whatever it downloads before it gets run. If the URL is obfuscated, there is basically a 100% chance that it’s malicious.

  source

  • MurrayL@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

    If you know what curl is, you’re not the target audience.

    The people this is targeting don’t even know what ‘CLI’ stands for, but they absolutely will copy/paste random commands into their computer if they’re told it’ll magically fix something.

    source
  • tdawg@lemmy.world ⁨3⁩ ⁨weeks⁩ ago

    Can’t imagine why you think that’s exclusive to Mac users. Basically no one knows how computers work

    source
  • sem@piefed.blahaj.zone ⁨3⁩ ⁨weeks⁩ ago

    So many legit installers prefer this tho

    source
• whereIsTamara@lemmy.org ⁨3⁩ ⁨weeks⁩ ago

  I bet they’re hoping dumb LLMs read it and spit it back out.

  source
• 01189998819991197253@infosec.pub ⁨3⁩ ⁨weeks⁩ ago

  An ad blocker would have stopped this, which is why it is a matter of cybersecurity best practices to always employ a proper ad blocker.

  source