Mac malware mayhem as 100 million Apple users at risk of having personal data stolen

When it comes to cybersecurity, Apple’s Macs are often seen as more secure than Windows PCs. However, recent incidents have shown that Macs are not completely immune to cyber threats. A new variant of stealer malware, known as BanShee, has been discovered by security researchers. This malware targets browser credentials, cryptocurrency wallets, and other personal data on Mac devices.

BanShee Stealer is a sophisticated piece of malware that has evolved over time. Initially, it relied on macOS browser extensions to steal data. However, it has now shifted its tactics and uses phishing websites and fake GitHub repositories to target Mac users. This new variant of BanShee has incorporated a string encryption algorithm stolen from Apple’s XProtect antivirus engine, making it harder for antivirus programs to detect.

Once BanShee infects a system, it immediately starts collecting sensitive information. It targets data from popular browsers like Chrome, Brave, Edge, and Vivaldi, as well as cryptocurrency wallet extensions. The malware even exploits two-factor authentication (2FA) extensions to steal credentials. Additionally, BanShee gathers information about the device’s software and hardware, as well as the external IP address. It tricks users with fake system prompts to capture macOS passwords and then sends the stolen data to command-and-control servers.

The creators of BanShee have used fake GitHub repositories to distribute the malware. By setting up repositories that appear legitimate, complete with fake reviews and stars, they were able to trick users into downloading the malicious files. These campaigns targeted both macOS and Windows users, with Windows users being hit by a different malware called Lumma Stealer.

To protect yourself from Mac malware like BanShee Stealer, it is essential to follow certain security measures. Firstly, ensure that you have strong antivirus software installed on your devices. Only download software from reputable sources and be cautious with links and downloads. Keep your software updated, use strong and unique passwords, and enable two-factor authentication for important accounts.

In conclusion, while Macs may be considered more secure than Windows PCs, they are not immune to cyber threats. The evolving nature of malware, such as BanShee Stealer, highlights the importance of maintaining good cybersecurity practices. By following these tips and staying vigilant, you can protect your Mac and personal data from malicious attacks.