TLDR InfoSec · ATTACKS & VULNERABILITIES
HACKER TARGETS OTHER HACKERS AND GAMERS WITH BACKDOORED GITHUB CODE
Summary from the TLDR InfoSec newsletter
Sophos detected a campaign in which an attacker uses GitHub repositories with hidden backdoors to target other hackers and gamers. The repositories use various loaders to deploy various payloads, such as info-stealers and remote access trojans (RATs). Many of the fake repositories are designed to target other hackers, but some also use game cheats, mod tools, and fake exploits as lures.