News

GitHub abused to distribute payloads on behalf of malware-as-a-service
The use of GitHub gave the malware-as-a-service (MaaS) a reliable and easy-to-use platform that’s greenlit in many enterprise ...
GitHub users targeted with dangerous malware attacks - here's what we know
GitHub is an extremely popular platform in the open source world, and as such is under a constant barrage of attacks. This ...
The Hacker News2d
Hackers Use GitHub Repositories to Host Amadey Malware and Data Stealers, Bypassing Filters
Malicious GitHub repositories used by threat actors to host Amadey payloads and steal data, impacting targeted entities.
Infosecurity Magazine2d
Malware-as-a-Service Campaign Exploits GitHub to Deliver Payloads
A new malware distribution campaign leveraging public GitHub repositories as a delivery infrastructure for various malicious ...
Popular npm linter packages hijacked via phishing to drop malware
Popular JavaScript libraries eslint-config-prettier and eslint-plugin-prettier were hijacked this week and turned into ...
Criminals are using a dangerous fake free VPN to spread malware via GitHub - here's how to stay safe
Security experts have warned of an emerging new cyber threat involving fake VPN software hosted on GitHub. A report from Cyfirma outlines how malware disguises itself as a “Free VPN for PC” and lures ...
The Hacker News4d
AsyncRAT's Open-Source Code Sparks Surge in Dangerous Malware Variants Across the Globe
Discover how AsyncRAT evolved from GitHub release to a widespread malware tool, spawning dangerous variants like DCRat and ...
InfoWorld8y
Malware finds unwitting ally in GitHub - InfoWorld
The malware looked up an HTML page stored in the GitHub project to obtain the encrypted string containing the IP address and port number for the C&C server, wrote Trend Micro threat researcher ...
Hundreds of Minecraft mods on GitHub are infested with hard-to-spot spyware
That seems to be the choice for the latest batch of spyware, which is hiding in mods for the indefatigable Minecraft, now getting a predictable boost from a smash-hit kid’s movie. According to Check ...
TechRadar8mon
This new phishing strategy utilizes GitHub comments to distribute malware
Github repositories are being infected with malware Trusted repositories can bypass secure web gateways Github comments are also being used to hide malicious files In a new phishing campaign ...
ZDNet4y
GitHub: Here's how we're changing our rules around malware and ... - ZDNET
GitHub: Here's how we're changing our rules around malware and software vulnerability research Written by Liam Tung, Contributing Writer June 7, 2021 at 7:05 a.m. PT ...
ZDNet7y
Cybercriminals spotted hiding cryptocurrency mining malware in forked ...
Cybercriminals have found another way to spread their malware: uploading cryptocurrency mining code to GitHub, according to security researchers at security company Avast. Developers 'fork ...