An Apple security researcher has spoken out to allay fears that a recent strain of macOS malware could pose a significant threat to users.
As reported by Decrypt, it was claimed the malicious software was capable of penetrating antivirus detection for several weeks, by piggybacking onto an Apple encryption scheme.
This led to reports that 100 million users may “be preyed on”, with “real and present dangers”, but fresh doubt has been cast on this analysis.
Patrick Wardle, CEO of endpoint security startup DoubleYou, insisted “There’s really nothing special about this specific sample.”
He did not completely dismiss the potential impact of the malware, but the clear assertion was that the threat was portrayed as a much greater danger than it is.
Wardle did agree that caution is required as the malware appears to target “software-based crypto wallets”, but said the media headlines were not warranted.
Known as Banshee, the strain in question is a $3000 commodity, a “stealer-as-a-service” weapon to manipulate crypto wallets and browser data.
In November, the major software supply chain BlueYonder was hit by a significant ransomware impact, leaving many huge brands reeling.
Banshee banished by its creators
Banshee’s reputation and impact burned fast and short after its creators pulled the plug in November 2024. After the source code of the malware was leaked on underground platforms, those responsible moved quickly to shut it down.
It made people take notice of the way it imitated Apple’s XProtect antivirus tool, once it was eventually detected after two months of unseen activity.
Wardle acknowledged the evasive nature of the malware and the sophistication behind its disguise, but beyond that, he was not impressed with its rudimentary core theft threat.
“Out of the box, macOS is going to thwart the majority of malware,” he said.
“There’s essentially no risk to the average Mac user,” added the former researcher at the U.S. National Security Agency.
Those words will be received well by many millions of users across the United States and beyond.
Image credit: Via Midjourney