New malware targets macOS using Apple code to stealthily steal personal information and login credentials: learn how to effectively protect your data against this threat.
Tl;dr
- Malware called Banshee targets Mac users.
- Banshee steals browser credentials and cryptocurrency wallets.
- The recommendations for protecting yourself from this malware are detailed.
Security alert: Macs in the sights of malware
Apple Macs, while less often targeted by hackers than Windows PCs, are not invulnerable. According to security researchers at Check Point Research, a new variant of the infamous Banshee malware has been detected that can steal browser credentials, cryptocurrency wallets and other personal data.
Elusive malware
It was in 2024 that Check Point first discovered the Banshee macOS Stealer, a form of malware as a service targeting macOS users. The trick of this malware is to have incorporated the same encryption methods as Mac’s XProtect antivirus softwaremaking its detection difficult. So, for more than two months, it remained undetected, quietly siphoning data from targeted devices.
Spread and consequences
In November 2024, the source code for the Banshee macOS Stealer was leaked on underground forums. “The malware doesn’t just infiltrate, it operates stealthily, blending in with normal system processes while stealing browser credentials, cryptocurrency wallets, user passwords, and sensitive file data.” said the Check Point researchers. The latter targets browsers such as Chrome and Edge, as well as browser extensions for cryptocurrency wallets.
Faced with this threat, Check Point reminds that no operating system is safe. To protect yourself from Banshee macOS Stealer, it is recommended to remain vigilant about the applications you download. Your Mac already comes with XProtect antivirus software, but it’s best to use it alongside another Mac antivirus solution. Additionally, it is advisable to use paid antivirus software, which is updated more regularly and often includes a VPN or password manager to help you stay safe online.