Urgent Alert for Apple Users: Banshee Malware Returns

Security researchers at the Checkpoint Research agency discovered a new variant of Banshee malware. Researchers claim that this Banshee malware is to steal browser credentials, cryptocurrency wallet, and other sensitive data from macOS users. 

Checkpoint Research wrote a blog post about the gravity of Banshee malware and stated, “This stealthy malware doesn’t just infiltrate; it operates undetected, blending seamlessly with normal system processes. Even seasoned IT professionals struggle to identify its presence. Banshi stealer isn’t just another piece of malware–it’s a critical warning for users to reassess their security assumptions and take proactive measures to safeguard their data.”

Banshee stealer was first discovered in 2024. It was publicised as a “stealer-as-a-service” on XSS, Exploit, and Telegram, where cyber attackers could purchase this malware. In September 2024, a new version of Banshee was discovered, which could evade detection. It stole a string encryption algorithm from Apple’s XProtect anti-virus engine. 

In November 2024, Banshee’s source code was leaked, allowing antivirus makers to prepare for the malware. This resulted in better detection and awareness of new variants of malware. 

The latest Banshee variant attacks browsers, such as Chrome, Brave, Edge, etc., alongside their extensions. It also exploits a Two-Factor Authentication to take over credentials. 

Ms Ngoc Bui, a cybersecurity veteran at Menlo Security, said users need a multi-layered approach to security that includes highly trained hunters on Mac. Restricting access and ensuring that permissions are only granted when necessary can help users evade threats like Banshee.