HACKINTOSH.ORG | Macintosh discussion forums

Security Bite: macOS malware ‘Banshee’ found using Apple’s own code to evade detection

<div class="feat-image">(https://9to5mac.com/wp-content/uploads/sites/6/2024/01/Security-Bite-FI-1.png?w=1600)</div><p>9to5Mac Security Bite is exclusively brought to you by <a href="https://mosyle.net/87PQ" target="_blank" rel="noreferrer noopener"><strong>Mosyle, the only Apple Unified Platform</strong>.[/url] Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening &amp; Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. <strong>Request your EXTENDED TRIAL (https://mosyle.net/87PQ)</strong> today and understand why Mosyle is everything you need to work with Apple.</p>



<hr class="wp-block-separator has-alpha-channel-opacity">



<p>A new report from Check Point Research details how a new variant of the infamous Banshee stealer malware from Russian-speaking cybercriminals takes a page from Apple’s own security practices to evade detection. The malware remained undetected for over two months by cleverly incorporating the same encryption methods as Mac’s XProtect antivirus detection suite.</p>



<p>If you’re an avid reader of Security Bite, you’ve heard me say (more than once) that malware stealers, usually through malware-as-a-service (MaaS) business models, are currently the largest threat to Mac users. They’re destructive, targeting your iCloud Keychain passwords, cryptocurrency wallets, sensitive information from files, and even system passwords like a stealthy low-orbiting ion canon. Cybercriminals will often embed this malicious code in seemingly legitimate applications as a ploy to infect machines.</p>



 <a data-layer-pagetype="post" data-layer-postcategory="mac-malware,security,security-bite" data-layer-viewtype="unknown" data-post-id="985328" href="https://9to5mac.com/2025/01/10/security-bite-macos-malware-banshee-found-using-apples-own-code-to-evade-detection/#more-985328" class="more-link">more…[/url]

Source: Security Bite: macOS malware ‘Banshee’ found using Apple’s own code to evade detection (https://9to5mac.com/2025/01/10/security-bite-macos-malware-banshee-found-using-apples-own-code-to-evade-detection/)