- Kaspersky Research finds “hundreds” of malicious GitHub obligation
- Commissions pretend to be useful software but fool victims to download malware
- At least one person lost 5 BTC because of the campaign
CyberSecurity scientists Kaspersky have Iscovered a prolonged, widespread criminal campaign targeting software developers with information-stealing malware.
Kaspersky said that it observed hundreds of fake GitHub stocks, some form as tools and automation mechanisms, others like hacks and cracks that actually delivered different kinds of malware to their victims. They called the campaign ‘Gitvenom’. Apparently, someone has been very thorough, carefully created obligations, writing accompanying documentation and readme files, all to avoid being marked as malware.
However, under the fake documents lies malicious code built in Python, JavaScript, C, C ++. and c#. Kaspersky saw node.js stealer, asyncrat, Qasar Backdoor and a Clipboard -Capture. Malware has been circulating over Github for at least two years, Kaspersky emphasized with goals and victims located around the world, but some countries are targeted more than others: with Russia hit Brazil and Turkey especially hard.
Mister Bitcoin
There is nothing to tell how many victims fell for Ruse, but Kaspersky appointed a case where someone lost 5 BTC to scam, equivalent to just under half a million dollars.
GitHub is one of the most popular codepositories in the world used every day by millions of software developers. It is an important platform that helps speed up and simplify software development while improving security by allowing countless security experts to examine the code.
However, popularity is also drawing in the wrong audience. GitHub is constantly bombarded with malware as hackers use typosquatting, imitation and direct fraud to try to trick people into downloading malware instead of legitimate code.
Github’s maintenance workers are working hard to keep the platform clean and was forced on several occasions to suspend new account production and new obligations due to an attack of malware.
Via Bleeping computer
