Banshee 2.0 Malware Steals Apple's Encryption to Hide on Macs

The report describes Banshee, a macOS infostealer sold on Russian cybercrime marketplaces and distributed via cracked-software GitHub repositories and phishing sites; it steals browser credentials, crypto-wallet extension data, system info and login passwords. A later variant reused the string-encryption algorithm from Apple's XProtect to evade detection by most AV engines for months, was linked to over 26 campaigns, and its source code was eventually leaked, increasing the risk of further spread.