Banshee macOS Malware Expands Targeting

Summary: The Banshee macOS information stealer has been updated to target systems using the Russian language, expanding its reach, according to cybersecurity firm Check Point. Initially launched in mid-2024, the malware continues to pose threats despite the leak of its source code.

Threat Actor: Russian Developers | Russian Developers
Victim: macOS Users | macOS Users

Key Point :

• Banshee can collect sensitive data including passwords, system information, and cryptocurrency wallet details.
• The latest version has removed the previous restriction that prevented execution on Russian language systems.
• Phishing websites and fake GitHub repositories are still being used to distribute the malware.
• The leak of the source code has improved detection by antivirus engines but raises concerns about new variants being developed.