Fake GitHub security tools spread malware to over 2,000 computers
MALWAREredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Doctor Web reported on November 5 a campaign using malicious GitHub repositories disguised as security utilities, with more than 2,000 computers infected. Lures are built as Visual Studio projects and Python and Go scripts, deploying RATs, cryptocurrency clippers and credential stealers. Targets include cybersecurity professionals and blockchain gaming users. The article gives no CVEs or IOCs. Defenders should treat unverified repositories as hostile, review build and script execution from GitHub downloads, and hunt for clipboard hijacking and credential-theft behaviour.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Only download security tools from sources you have verified, and check repositories carefully before running any code from them.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
GBHackers