Banshee, a malware linked to Russian-speaking cyber criminals targeting macOS users, had been undetected for over two months until it was leaked on XSS forums. The malware used a string encryption algorithm identical to Apple’s XProtect antivirus engine for MacOS. Despite the operation shutting down after the leak, threat actors continue to distribute Banshee via phishing websites. Also, the malware was distributed through malicious GitHub repositories, targeting Windows users with Lumma Stealer and macOS users with Banshee Stealer.

North Korean Hackers Use Fake U.S. Companies to Spread Malware in Crypto Industry: Report
North Korean hackers reportedly set up shell companies in the US to penetrate the crypto sector and target developers via fake job offers, according to