Fake security tools on GitHub infect at least 2,000 Windows PCs
Attackers posted malicious projects on GitHub disguised as security scanning and log analysis tools to distribute malware to security professionals and developers. The malware included AsyncRAT and information stealers, and at least 2,000 Windows PCs were infected. Dr.Web published a technical analysis report on 5 November, but the affected organisations were not named.
Key facts
- Affected organisation
- Being confirmed
- Incident type
- Malware
- Occurred / detected
- Not confirmed
- Scale of damage
- At least 2,000 Windows PCs infected
- Cause / method
- Distribution of malicious projects on GitHub disguised as security scanning and log analysis tools
- Location
- Other countries
Timeline
- Dr.Web published a technical analysis report detailing malware distribution through fake security tools and the infection of at least 2,000 Windows PCs.
2 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.