An estimated 100 million Apple users are at risk of falling victim to malware.
Cybersecurity software company Check Point has issued an urgent warning to millions of Mac users around the world who may fall prey to malicious actors that evade the devices' built-in antivirus systems.
According to the company, cybercriminals have developed malware, dubbed “Banshee macOS Stealer,” that secretly steals credentials and other sensitive data while running undetected for over months.
The malware first appeared last year in what Check Point calls “underground forums” and was called a “hijacker as a service” that was available for purchase for just $3,000. Through it, cybercriminals can target Mac users with malware through phishing sites that masquerade as popular software companies like Chrome and Telegram, the company said.
In the fall, it was discovered that the “Banshee macOS Stealer” had been modified by developers using code “stolen” from Apple’s XProtect, an antivirus system built into Macs, which allowed malware to go undetected on user computers.
“This stealthy malware doesn't just sneak in; it operates undetected, blending seamlessly into normal system operations while stealing browser credentials, cryptocurrency wallets, user passwords, and sensitive file data,” Check Point researchers wrote.
“What makes Banshee truly worrisome is its ability to evade detection. Even seasoned IT professionals struggle to pinpoint its presence.
After the malware's source code was leaked on online forums in November, antivirus systems have become better able to detect it, but it has also raised concerns about emerging cybercrime tactics.
“While macOS includes powerful security features like Gatekeeper, XProtect, and sandboxing, the emergence of Banshee Stealer serves as a reminder that no operating system is immune to threats,” the researchers wrote.
In order to protect yourself and your data, technology news website Tom's Guide advises users to “be vigilant” after downloadable apps and software by verifying the legitimacy of the company before downloading.
Although Macs come with built-in antivirus software, the experts at Tom's Guide recommended “using this in conjunction” with other antivirus software, which can be purchased, in addition to a VPN and password manager.
