Security experts have identified a new variant of the Banshee Stealer virus designed to attack macOS users and increasing threats to Apple products. Originally identified in mid August 2024 the Banshee Stealer is a MaaS or malware as a service. The new, discovered in September 2024, is somewhat more advanced and prepared to avoid recognition while gaining unauthorized access to user data.
This malware is mainly spread through phishing websites and fake GitHub repositories. Once it is installed it can gather data that the browser saves, files with specific extensions, and wallet information related to cryptocurrencies.
While users of macOS devices have believed them to be safer than other operating systems, this is one of the most prominent targets for hackers. Through Banshee Stealer, people can understand the requirements of secure measures within organizations.
Having worked for cybersecurity companies and as a security consultant herself, Ngoc Bui of Menlo Security points out the issues with macOS defenses, stating, ‘Even leading EDR solutions have shortcomings in Mac, leaving organisations with sizable blind spots.’ She underlines that a multiple layering security approach should be combined with a special focus on the Apple infrastructure.
James Scobey, Keeper Security’s Chief Information Security Officer said that by outsmarting the fundamentally limited traditional defenses, attackers are actively using novel techniques: encryption ripped from native security tools. He underlines that one should use Privileged Access Management (PAM) in order to minimize the events and risks.
Eric Schwake, Director of Cybersecurity Strategy at Salt Security, said that organisations need to start taking precautions – the application of endpoint protection, strictly observing password hygiene and getting into the habit of routinely applying software patches. “Despite the common belief that Macs offer greater security, this incident emphasizes that organizations must adopt strong security measures across all devices,” Schwake notes.
To protect against threats like Banshee Stealer, experts recommend:
Implementing advanced endpoint protection.
Enforcing strict password policies and using secure password managers.
Training users on phishing and malware risks.
Regularly updating software with security patches.
As cyber threats evolve, macOS users must prioritize proactive security measures to safeguard their data and devices