Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > uk.comp.sys.mac > #180301

Re: Apple users warned of hi-tech Mac malware

Path csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From Mike Easter <MikeE@ster.invalid>
Newsgroups uk.comp.sys.mac, alt.computer.workshop
Subject Re: Apple users warned of hi-tech Mac malware
Date Mon, 17 Feb 2025 14:21:23 -0800
Lines 22
Message-ID <m1hr35Fjuv3U1@mid.individual.net> (permalink)
References <m1fckgF87jmU6@mid.individual.net> <m1fcpdF87jmU7@mid.individual.net> <vov3o3$13tet$1@dont-email.me> <m1hkrcFiu5aU1@mid.individual.net>
Mime-Version 1.0
Content-Type text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding 8bit
X-Trace individual.net 8mrTrOlHVjn7f8cjNIhp5AvKgyAQwxob5o/jEZ0E/w9p1cWsrc
Cancel-Lock sha1:hit62aNvf7qxAwFGCaJ5CJo+9ek= sha256:3SVsRuiDUTBg7y02tT1R90XS/TNNM3P/n6M9vDkzEag=
User-Agent Mozilla Thunderbird
Content-Language en-US
In-Reply-To <m1hkrcFiu5aU1@mid.individual.net>
Xref csiph.com uk.comp.sys.mac:180301

Cross-posted to 2 groups.

Show key headers only | View raw

Mike Easter wrote:
> maybe somewhere else there is a specific article whose purpose isn't 
> just to promote Intego.

This site has more than anyone should want to know about this malware. 
I don't really understand the idea of the ware's 'stealing' of Mac's 
XProtect 'string'.

https://research.checkpoint.com/2025/banshee-macos-stealer-that-stole-code-from-macos-xprotect/

> Banshee: The Stealer That “Stole Code” From MacOS XProtect

Bleeping Computer's explanation is easier to get:

https://www.bleepingcomputer.com/news/security/banshee-stealer-evades-detection-using-apple-xprotect-encryption-algo/

> Banshee stealer evades detection using Apple XProtect encryption algo



-- 
Mike Easter

Back to uk.comp.sys.mac | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Apple users warned of hi-tech Mac malware David <BD@invalid.email> - 2025-02-17 00:02 +0000
  Apple users warned of hi-tech Mac malware David <BD@invalid.email> - 2025-02-17 00:05 +0000
    Re: Apple users warned of hi-tech Mac malware FromTheRafters <FTR@nomail.afraid.org> - 2025-02-17 05:41 -0500
      Re: Apple users warned of hi-tech Mac malware David <BD@invalid.email> - 2025-02-17 14:15 +0000
        Re: Apple users warned of hi-tech Mac malware FromTheRafters <FTR@nomail.afraid.org> - 2025-02-17 13:58 -0500
          Re: Apple users warned of hi-tech Mac malware David <BD@invalid.email> - 2025-02-17 19:48 +0000
            Re: Apple users warned of hi-tech Mac malware Mike Easter <MikeE@ster.invalid> - 2025-02-17 16:32 -0800
              Re: Apple users warned of hi-tech Mac malware David <BD@invalid.email> - 2025-02-18 08:17 +0000
      Re: Apple users warned of hi-tech Mac malware Mike Easter <MikeE@ster.invalid> - 2025-02-17 12:34 -0800
        Re: Apple users warned of hi-tech Mac malware Mike Easter <MikeE@ster.invalid> - 2025-02-17 14:21 -0800
          Re: Apple users warned of hi-tech Mac malware David <BD@invalid.email> - 2025-02-17 22:31 +0000
            Re: Apple users warned of hi-tech Mac malware Mike Easter <MikeE@ster.invalid> - 2025-02-17 15:03 -0800

csiph-web