Alert macOS users! This malware can steal your sensitive data

As macOS users, we often take pride in the security of our devices, trusting features like Gatekeeper and XProtect to keep threats at bay. But recent revelations by Check Point Research (CPR) remind us that no system is completely immune. A new version of the Banshee macOS Stealer, a stealthy malware, has been quietly targeting macOS users, stealing sensitive information like browser credentials, cryptocurrency wallets, and more.  

What is Banshee Stealer?

Banshee Stealer is a sophisticated malware first seen in mid-2024. Initially advertised as a “stealer-as-a-service” on underground forums, it was sold for $3,000 to cybercriminals targeting macOS users. In September, a new version emerged, introducing advanced techniques to evade detection by antivirus software.  

This malware uses a string encryption method borrowed from Apple’s XProtect antivirus engine, which likely allowed it to remain undetected for over two months. During this time, threat actors distributed Banshee via phishing websites and fake GitHub repositories, often disguised as popular tools like Chrome, Telegram, and TradingView.  

Also read: Govt issues high-risk alert for iPhone, iPad, and Mac users in India: Is your device safe?

How does it work?

Once installed, Banshee operates stealthily, blending into system processes while extracting sensitive data. Here’s how it targets users:  

• Data theft: It steals browser credentials, cryptocurrency wallet details, and even macOS passwords.
• User deception: It uses fake system prompts to trick users into providing passwords.
• Detection evasion: Advanced anti-analysis techniques help it bypass antivirus systems.
• Data exfiltration: Stolen data is sent to command-and-control servers using encrypted files.

Also read: High-risk security flaw found in iPhones and other Apple products: Is your device safe?

What you should do

This malware highlights the growing risks for macOS users. To protect yourself:  

• Avoid downloading software from unverified sources.
• Regularly update your macOS and antivirus tools.
• Be cautious of unexpected system prompts asking for passwords.