News

GitHub abused to distribute payloads on behalf of malware-as-a-service
The use of GitHub gave the malware-as-a-service (MaaS) a reliable and easy-to-use platform that’s greenlit in many enterprise ...
GitHub users targeted with dangerous malware attacks - here's what we know
GitHub is an extremely popular platform in the open source world, and as such is under a constant barrage of attacks. This ...
Infosecurity Magazine2d
Malware-as-a-Service Campaign Exploits GitHub to Deliver Payloads
A new malware distribution campaign leveraging public GitHub repositories as a delivery infrastructure for various malicious ...
The Hacker News2d
Hackers Use GitHub Repositories to Host Amadey Malware and Data Stealers, Bypassing Filters
Malicious GitHub repositories used by threat actors to host Amadey payloads and steal data, impacting targeted entities.
Popular npm linter packages hijacked via phishing to drop malware
Popular JavaScript libraries eslint-config-prettier and eslint-plugin-prettier were hijacked this week and turned into ...
iHLS Israel Homeland Security3d
Malware Disguised as VPN Software Found Abusing GitHub’s Open Platform
A new malware campaign is using GitHub to quietly distribute an infostealer tool under the pretense of free utility software, ...
Criminals are using a dangerous fake free VPN to spread malware via GitHub - here's how to stay safe
Security experts have warned of an emerging new cyber threat involving fake VPN software hosted on GitHub. A report from Cyfirma outlines how malware disguises itself as a “Free VPN for PC” and lures ...
Cybernews6d
Hackers use GitHub to spread malware disguised as a free VPN
That’s exactly what one campaign, identified by cybersecurity firm Cyfirma, did. The malware was hosted openly on a GitHub ...
The Hacker News4d
AsyncRAT's Open-Source Code Sparks Surge in Dangerous Malware Variants Across the Globe
Discover how AsyncRAT evolved from GitHub release to a widespread malware tool, spawning dangerous variants like DCRat and ...
Arch Linux pulls AUR packages that installed Chaos RAT malware
Arch Linux has pulled three malicious packages uploaded to the Arch User Repository (AUR) were used to install the CHAOS remote access trojan (RAT) on Linux devices.
Cyber Security Intelligence9d
GitHub Exploited In Sophisticated Malware Campaign
Increasing reliance on open-source repositories calls for much higher-level vigilance to counter deceptive tactics.
Hundreds of Minecraft mods on GitHub are infested with hard-to-spot spyware
That seems to be the choice for the latest batch of spyware, which is hiding in mods for the indefatigable Minecraft, now getting a predictable boost from a smash-hit kid’s movie. According to Check ...