![\"New](\"https:\/\/wp.timesamerica.net\/wp-content\/uploads\/2024\/08\/new-russian-threat-targets-over-100-apple-macos-browser-extensions.jpg\")
<\/picture><\/div>\nA woman working on her Mac laptop<\/span> (Kurt “CyberGuy” Knutsson)<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n Researchers at Elastic Security Labs<\/u><\/span> found that Banshee, a malware developed by Russian hackers, works on macOS x86_64 and ARM64 systems. The malware is being sold as a service to other bad actors for just $3,000, which the researchers think is pretty cheap compared to other malware available on the dark web to criminals. Yes, believe it or not, there\u2019s a whole market for this stuff.<\/p>\n Apple has a tight infrastructure that prevents bad actors from targeting its devices, but hackers always find loopholes. In this case, it\u2019s the browser extensions you install, whether it\u2019s an ad blocker or an Amazon price tracker.<\/p>\n “Banshee Stealer targets a wide range of browsers, cryptocurrency wallets, and around 100 browser extensions, making it a highly versatile and dangerous threat,” Elastic Security Labs said. The malware targets several web browsers and crypto wallets, including Safari, Google Chrome, Mozilla Firefox, Brave, Microsoft Edge, Vivaldi, Yandex, Opera, OperaGX, Exodus, Electrum, Coinomi, Guarda, Wasabi Wallet, Atomic and Ledger.<\/p>\n Once the malware gets into your Mac, it starts stealing your data. It can grab information about the system and passwords from the Keychain. It also pulls data from different file types stored on your desktop and in your documents. Plus, it\u2019s got tricks to avoid detection, like figuring out if it\u2019s in a virtual environment and using an API to steer clear of Macs where Russian is the primary language.<\/p>\n Illustration of a hacker working on a laptop<\/span> (Kurt “CyberGuy” Knutsson)<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n 4.3 MILLION AMERICANS EXPOSED IN MASSIVE HEALTH SAVINGS ACCOUNT DATA BREACH<\/u><\/strong><\/span><\/p>\n The report from Elastic Security Labs didn\u2019t go into detail about how the Banshee malware actually infects your computer. But it\u2019s likely using the same tactics we\u2019ve seen other Mac and Windows malware use before.<\/p>\n This usually involves sneaky methods like displaying fake pop-ups that mimic legitimate apps or services. Hackers often create a sense of urgency, pushing you to click on a link to “install an update” or “fix an issue” right away. Of course, instead of an update, that link installs the malware on your system.<\/p>\n It\u2019s also unclear how widespread this malware is, which regions it\u2019s targeting or the extent of the damage it\u2019s caused so far. We reached out to Apple for a comment on this article but did not hear back before our deadline.<\/p>\n A woman working on her laptop<\/span> (Kurt “CyberGuy” Knutsson)<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n MASSIVE SECURITY FLAW PUTS MOST POPULAR BROWSERS AT RISK ON MAC<\/u><\/strong><\/span><\/p>\n While there\u2019s no exact solution to prevent the Banshee malware, the following computer practices can help keep your Mac secure.<\/p>\n 1) Limit and manage browser extensions<\/strong>: Be selective about the browser extensions you install. Only add extensions from well-known developers and those you truly need. Regularly review and manage your extensions to ensure they haven\u2019t been compromised or are no longer necessary. Extensions with excessive permissions or that request access to sensitive data should be removed. Check out our top browser extensions to make life easier<\/u><\/span>.<\/p>\n 2) Be cautious with downloads and links<\/strong>: Only download software from reputable sources such as the Mac App Store or official websites of trusted developers. Be wary of unsolicited emails or messages prompting you to download or install updates, especially if they contain links. Phishing attempts often disguise themselves as legitimate update notifications or urgent messages.<\/p>\n The best way to protect yourself from clicking malicious links that install malware is to have strong antivirus protection installed on all your devices. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android and iOS devices<\/u><\/span>.<\/p>\n 3) Keep your software updated<\/strong>: Ensure that both macOS and all installed applications are up to date. Apple frequently releases security patches and updates that address vulnerabilities. Enable automatic updates for macOS and your apps to stay protected without having to manually check for updates. If you need more help, see my guide on keeping all your devices updated<\/u><\/span>.<\/p>\n 4) Use strong and unique passwords: <\/strong>To protect your Mac from malware, it\u2019s also crucial to use strong, unique passwords for all your accounts and devices. Avoid reusing passwords across different sites or services. A password manager<\/u><\/span> can be incredibly helpful here: It generates and stores complex passwords for you, making them difficult for hackers to crack.<\/p>\n It also keeps track of all your passwords in one place and automatically fills them in when you log into accounts, so you don\u2019t have to remember them yourself. By reducing the number of passwords you need to recall, you\u2019re less likely to reuse them, which lowers the risk of security breaches. Get more details about my best expert-reviewed password managers of 2024 here<\/u><\/span>.<\/p>\n HOW TO REMOVE YOUR PRIVATE DATA FROM THE INTERNET<\/u><\/strong><\/span> <\/p>\n Macs, whether you\u2019re using a MacBook or an iMac, are generally pretty secure, but they\u2019re not completely foolproof. One weak spot has always been extensions, and that\u2019s where the Banshee malware comes in. It exploits these vulnerabilities to swipe your important data and money. There aren\u2019t any specific steps to deal with this exact threat, but sticking to good computing habits can help a lot. Make sure your downloads are from trusted sources, be cautious with unexpected email attachments and think carefully before installing anything.<\/p>\n What steps do you take to verify that downloads and extensions are from legitimate sources? Let us know by writing us at <\/strong>Cyberguy.com\/Contact<\/u><\/strong><\/span>.<\/u><\/strong><\/p>\n For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com\/Newsletter<\/u><\/strong><\/span>.<\/u><\/strong><\/p>\n Ask Kurt a question or let us know what stories you’d like us to cover<\/u><\/span>.<\/u><\/p>\n Follow Kurt on his social channels:<\/p>\n Answers to the most asked CyberGuy questions:<\/p>\n Copyright 2024 CyberGuy.com. All rights reserved.<\/i><\/p>\n <\/p>\nWhat you need to know<\/strong><\/h2>\n
Targeted browsers and extensions<\/strong><\/h2>\n
Data theft capabilities<\/strong><\/h2>\n
![\"New](\"https:\/\/wp.timesamerica.net\/wp-content\/uploads\/2024\/08\/new-russian-threat-targets-over-100-apple-macos-browser-extensions-1.jpg\")
<\/picture><\/div>\nHow does the malware infect your computer?<\/strong><\/h2>\n
![\"New](\"https:\/\/wp.timesamerica.net\/wp-content\/uploads\/2024\/08\/new-russian-threat-targets-over-100-apple-macos-browser-extensions-2.jpg\")
<\/picture><\/div>\n4 ways to protect yourself from the Mac malware<\/strong><\/h2>\n
Kurt\u2019s key takeaways<\/strong><\/h2>\n