Trend Micro and ReversingLabs uncovered over 100 GitHub accounts distributing malware embedded in open source hacking tools.
Security researchers at Trend Micro and ReversingLabs have uncovered two fresh campaigns targeting red teams, novice cybercriminals, and developer environments via trojanized open source hacking tools.
Attributed by Trend Micro to a threat actor named Water Curse, one of the campaigns involved at least 76 GitHub accounts linked to repositories that had malicious payloads injected into build scripts and project files.
The payloads were designed to steal credentials, browser data, and session tokens, as well as to provide the threat actor with persistent remote access to the compromised systems.
Continue reading on:
New Campaigns Distribute Malware via Open Source Hacking Tools
Trend Micro and ReversingLabs uncovered over 100 GitHub accounts distributing malware embedded in open source hacking tools.
