In this case, Checkpoint security has identified a malware-as-a-service attack it calls Banshee macOS Stealer. This insidious attack, which has apparently now been closed down, was spread via seemingly legitimate browser downloads distributed outside of Apple’s Mac App Store.

Check Point Research (CSR) announced that it discovered a more sophisticated version of the Banshee Stealer malware. It warned that businesses must be careful as hackers could use it to “compromise sensitive information and damage reputations.

Banshee Stealer, a $3,000/month macOS malware, resurfaces with XProtect encryption, targeting 100M users via phishing campaigns.