A variant of the macOS theft tool Banshee can avoid detection using Apple’s encryption algorithm. The variant was found by Check Point Research, two months after evading similar systems. Threat actors distribute Banshee via phishing websites and fraudulent GitHub repositories. Experts warn of significant gaps in Mac security tools which need a multi-layered security approach to overcome.
This devious macOS malware is evading capture by using Apple’s own encryption
Check Point Research has discovered a new variant of the Banshee malware that evades Apple’s built-in malware protections, stealing sensitive system, browser, and cryptocurrency wallet