News

GitHub abused to distribute payloads on behalf of malware-as-a-service
The use of GitHub gave the malware-as-a-service (MaaS) a reliable and easy-to-use platform that’s greenlit in many enterprise ...
GitHub users targeted with dangerous malware attacks - here's what we know
GitHub is an extremely popular platform in the open source world, and as such is under a constant barrage of attacks. This ...
The Hacker News1d
Hackers Use GitHub Repositories to Host Amadey Malware and Data Stealers, Bypassing Filters
Malicious GitHub repositories used by threat actors to host Amadey payloads and steal data, impacting targeted entities.
Popular npm linter packages hijacked via phishing to drop malware
Popular JavaScript libraries eslint-config-prettier and eslint-plugin-prettier were hijacked this week and turned into ...
Criminals are using a dangerous fake free VPN to spread malware via GitHub - here's how to stay safe
Security experts have warned of an emerging new cyber threat involving fake VPN software hosted on GitHub. A report from Cyfirma outlines how malware disguises itself as a “Free VPN for PC” and lures ...
Infosecurity Magazine2d
Malware-as-a-Service Campaign Exploits GitHub to Deliver Payloads
A new malware distribution campaign leveraging public GitHub repositories as a delivery infrastructure for various malicious ...
Arch Linux pulls AUR packages that installed Chaos RAT malware
Arch Linux has pulled three malicious packages uploaded to the Arch User Repository (AUR) were used to install the CHAOS remote access trojan (RAT) on Linux devices.
The Hacker News4d
AsyncRAT's Open-Source Code Sparks Surge in Dangerous Malware Variants Across the Globe
Discover how AsyncRAT evolved from GitHub release to a widespread malware tool, spawning dangerous variants like DCRat and ...
TechJuice1d
Hackers Exploit DNS Blind Spot to Hide Stealthy Malware
Researchers uncover stealth malware using DNS records to bypass detection tools and hijack systems through less monitored ...
TechJuice3d
This Open-Source Malware Has Turned Into A Global Cyber Threat (And You Should Be Worried)
An open-source malware can now spawn into DCRat, Venom RAT, and JasonRAT, powering phishing, data theft, and MaaS campaigns worldwide.
Krebs on Security3d
Poor Passwords Tattle on AI Hiring Bot Maker Paradox.ai
However, a review of stolen password data gathered by multiple breach-tracking services shows that at the end of June 2025, a ...
GovInfoSecurity4d
North Korea Floods npm Registry with Malware
North Korean threat actors escalated their software supply chain attacks by uploading 67 new malicious packages to the npm ...