Check Point Research Warns 100 Million macOS Users Of A New Hack Attack, Here's What You Need To Know

This malicious software, first identified by security researchers late last year, is capable of stealing browser credentials, cryptocurrency wallets, and other sensitive data.

In a newly released report, Check Point Research warns macOS users of the real and substantial dangers posed by this ongoing hack campaign.

Source : Unsplash/Mohamed Kerroudj

While Windows users have traditionally been the primary targets for cyberattacks, the growing popularity of macOS has increasingly drawn the attention of cybercriminals. With 100 million users now at risk, macOS is no longer viewed as a safe haven. Although Apple’s security concerns often focus on the iPhone, new research reveals a significant threat to macOS users in the form of a variant of the Banshee Stealer malware, reported Forbes.

What Can Banshee Stealer Malware Do To macOS Users?

This malicious software, first identified by security researchers late last year, is capable of stealing browser credentials, cryptocurrency wallets, and other sensitive data. In a newly released report, Check Point Research warns macOS users of the real and substantial dangers posed by this ongoing hack campaign.

Despite Apple’s reputation for robust security measures, macOS users are far from immune to cyber threats. The rise of the Banshee Stealer underscores that “stealer-as-a-service” attacks are now a critical issue for Apple’s ecosystem, proving that no platform is entirely secure from sophisticated cybercriminal activities, reported Forbes.

Check Point researchers said, “For $3,000, threat actors could purchase this malware to target macOS users,” with the criminal developers having “stolen a string encryption algorithm from Apple’s own XProtect antivirus engine, which replaced the plain text strings used in the original version.”

This development likely played a significant role in allowing Banshee to operate under the radar and evade detection by cybersecurity tools for some time. However, the situation shifted dramatically when the malware's source code was leaked on the dark web toward the end of 2024. This leak resulted in the shutdown of the original Banshee service, Forbes reported.

At the time, Check Point Research issued a warning that the release of the source code would inevitably pave the way for new variants of the malware to surface, as other cybercriminals and threat actors would likely modify and redeploy the code. Unfortunately, this prediction has proven to be accurate, as emerging versions of the Banshee malware are now being used in fresh cyberattack campaigns, further complicating efforts to safeguard users and their data.