FAKE LASTPASS AUTHENTICATOR GITHUB REPOS PUSH NEW RAPUNCEL INFOSTEALER

Summary from the TLDR InfoSec newsletter

Security researchers uncovered a new malware campaign that utilizes GitHub repos to impersonate LastPass Authenticator and at least 39 other well-known products. The campaign utilizes a legitimate Microsoft Visual Studio CoreCLR Debugger, which loads a malicious DLL. The DLL deploys a previously undocumented infostealer and an EDR and antivirus killer that terminates a hardcoded list of 145 EDR or antivirus products.