cognitive cybersecurity intelligence

News and Analysis

Search

Banshee: The Stealer That “Stole Code” From MacOS XProtect

Banshee, a malware linked to Russian-speaking cyber criminals targeting macOS users, had been undetected for over two months until it was leaked on XSS forums. The malware used a string encryption algorithm identical to Apple’s XProtect antivirus engine for MacOS. Despite the operation shutting down after the leak, threat actors continue to distribute Banshee via phishing websites. Also, the malware was distributed through malicious GitHub repositories, targeting Windows users with Lumma Stealer and macOS users with Banshee Stealer.

Source: research.checkpoint.com –

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts