GitHub Repo Scam: Thousands of Malicious Repositories Discovered
A security researcher uncovered a massive scam leveraging GitHub to distribute malware. Thousands of repositories, disguised as game mods, cracked software, and other enticing downloads, were created to steal user data. Upon execution, these malicious programs collect sensitive information—crypto wallet keys, bank account details, social media credentials—and send it to a Discord server. Analyzing a detailed guide on creating these scam repositories, the researcher identified 1115 potentially malicious repositories, with fewer than 10% showing open issues with complaints. The malware, identified as Redox, systematically gathers various data points from the victim's computer and transmits them to a Discord webhook. This case highlights the scale and sophistication of cybercrime and underscores the need for enhanced security measures on platforms like GitHub.
Read more