Fake security tools on GitHub deliver backdoors and infostealers
MALWAREredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Criminals have uploaded fake security tools to GitHub, a popular site where programmers share code. People who download them, including cybersecurity professionals, can end up infected with malware that steals information and gives attackers secret access.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Verify the source and reputation of any security tool from GitHub before downloading or running it.
- Run unfamiliar security tools only in an isolated or sandboxed environment.
- Monitor analyst workstations for unexpected outbound network connections after installing third-party tools.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
BleepingComputer