Security News GitHub besieged by millions of malicious repositories in ongoing attack

[MuzzMelbourne]

Content source

https://arstechnica.com/security/2024/02/github-besieged-by-millions-of-malicious-repositories-in-ongoing-attack/

GitHub is struggling to contain an ongoing attack that’s flooding the site with millions of code repositories. These repositories contain obfuscated malware that steals passwords and cryptocurrency from developer devices, researchers said.

The malicious repositories are clones of legitimate ones, making them hard to distinguish to the casual eye. An unknown party has automated a process that forks legitimate repositories, meaning the source code is copied so developers can use it in an independent project that builds on the original one. The result is millions of forks with names identical to the original one that add a payload that’s wrapped under seven layers of obfuscation. To make matters worse, some people, unaware of the malice of these imitators, are forking the forks, which adds to the flood.

GitHub besieged by millions of malicious repositories in ongoing attack

GitHub keeps removing malware-laced repositories, but thousands remain.

arstechnica.com

 

[MuzzMelbourne]

Bank's, Government's, Insurer's... who cares...

But this really grinds my gears... 5 minutes alone with these peanuts...

 

[Zero Knowledge]

Not sure if this attack works on the intended targets, senior developers would you assume be very careful on what repo's they use and fork. Sure you may get one or two small fish but I imagine people with large crypto holdings would check and think twice.

 

[Can't Decide]

Researchers just said it affacting developer devices but will it also affact anyone that download and use the code on their devices?
Can the appliction that are affacted be detected or prevent it from infecting PC?

Just to be safe, for the time being better not download anything from Github until it contain and clear of repositories that contain obfuscated malware.

 

[Can't Decide]

Researchers just said it affacting developer devices but will it also affact anyone that download and use the code on their devices?
Can the appliction that are affacted be detected or prevent it from infecting PC?

Just to be safe, for the time being better not download anything from Github until it contain and clear of repositories that contain obfuscated malware.

Can't edit anymore...

Can the appliction that are affacted be detected or prevent it from infecting PC and Phone?
And will it affact installed program or app (especially those security & privacy app in PlayStore) that are from Github before this ongoing attack happen?