New Banshee Stealer Variant Bypasses Antivirus with Apple’s XProtect-Inspired Encryption

A new, stealthier version of the macOS-focused information-stealing malware, Banshee Stealer, has been detected. This variant bypasses antivirus systems using string encryption inspired by Apple’s XProtect and is distributed through phishing websites and fake GitHub repositories. The malware, offered as a malware-as-a-service, targets web browsers, cryptocurrency wallets, and specific file extensions.