$4.99/mo - Save 61% With Exclusive 2-Year Plan + 4 Months Free!Claim Now

Banshee Malware Resurfaces: XProtect Encryption Exploit Shocks

  • Last updated January 13, 2025
  • written by
    Writer

San Francisco, January 9, 2025 –The notorious Banshee Stealer malware is back, armed with XProtect-inspired encryption, bypassing antivirus defenses and targeting macOS users worldwide.

In a startling revelation, cybersecurity researchers have uncovered a revamped version of the notorious Banshee Stealer malware, now employing encryption inspired by Apple’s XProtect antivirus.

Once thought dormant after a source code leak in 2024, this new variant is stealthier, targeting over 100 million macOS users globally through sophisticated phishing campaigns. Eli Smadja, Security Research Manager at Check Point Research stated:

The malware, originally operating under a malware-as-a-service (MaaS) model at a steep $3,000/month, was believed to be defunct after its source code leaked. However, recent campaigns show its resurgence, exploiting phishing websites and fake repositories masquerading as popular software like Google Chrome and Telegram.

Notably, the updated malware has removed the Russian language check” safeguard, enabling it to cast a wider net of victims. It also integrates encryption algorithms inspired by Apple’s XProtect, enabling it to obfuscate malicious strings and bypass detection.

Banshee Stealer’s evolution underscores the urgent need for vigilance among users and organizations alike. Cybercriminals are leveraging advanced tools to breach systems, harvest browser data, cryptocurrency wallets, and sensitive files.


Other News At VPNRanks


Hey, wait!

Stay informed on the latest privacy updates, cybersecurity insights, and internet freedom news by following VPNRanks news daily! As your primary resource for critical updates in online security, we ensure you’re always in the know. Make VPNRanks your go-to guide for safeguarding your digital life.