109 fake GitHub repositories spread SmartLoader and StealC malware

A new malware campaign abused trust in GitHub by cloning legitimate open source projects and turning them into traps. Researchers at Hexastrike found 109 fake repositories across 103 GitHub accounts that pushed victims toward malicious ZIP files carrying SmartLoader, a LuaJIT-based loader that can fetch StealC and other payloads. This campaign can hit regular users […] The post 109 fake GitHub repositories spread SmartLoader and StealC malware appeared first on VPN Central.