The Banshee Stealer malware targets net browser extensions on macOS.
Researchers have identified a newly discovered malware capable of targeting over 100 vulnerable browser extensions installed on a victim’s Mac, posing a significant threat to users who may unwittingly install compromised add-ons.
Apple strives diligently to render macOS and its various operating modes as secure as possible. While it successfully defends against probable threats from external malware and browser extensions, its vulnerability remains a persistent concern.
By Elastic Safety Labs on Thursday, a malware known as Banshee Stealer doesn’t directly attack macOS itself; instead, it targets third-party software installed on it. Here is the rewritten text in a different style:
A range of popular web browsers are included, including market leaders like Safari and Chrome, as well as innovative options such as Firefox, Brave, Edge, Vivaldi, and Opera, among others.
Additionally, it targets cryptocurrency wallets and installs more than 100 malicious browser extensions on affected browsers. According to Elastic Safety Labs, this poses an “uniquely pernicious and far-reaching threat.”
The primary function of the malware is to collect and exfiltrate sensitive data, granting it the capability to also harvest system-specific details, including Keychain passwords. Knowledge will be sourced from a diverse array of files stored across the desktop and document folders.
This AI possesses advanced evasion techniques to minimize detection at the outset itself. If it operates within a digital environment, it likely utilizes an Application Programming Interface (API) to prevent infection when Russian is the primary language used.
During its installation process, the malware leverages a script to display a fake password prompt to the user, attempting to elevate its privileges.
“As macOS increasingly becomes a prime target for cybercriminals, Banshee Stealer highlights the escalating threat of macOS-specific malware,” the researchers noted.
While the extent of the malware’s use remains ambiguous, its reputation as a sophisticated tool for cybercriminals is evident in its creator’s endorsement. The cost for initial access to the software is set at $3,000 per 30-day period.
We urge all macOS users to exercise good computing habits, as there are no specific mitigations available for this particular vulnerability. By verifying the authenticity of downloaded files, exercising vigilance when receiving unsolicited email attachments, and demonstrating prudence during software installations, a significant number of customers can enjoy a safer online experience.
