HumanitarianBait campaign uses GitHub Releases to host Python infostealer payloads
VPN Central [Unofficial]
May 10, 2026
A cyberespionage campaign named HumanitarianBait is using fake humanitarian aid documents to deliver a Python-based infostealer on Windows systems. The attack hides a malicious shortcut inside a RAR archive and uses GitHub Releases to host the payload. Cyble Research and Intelligence Labs says the campaign uses Russian-language lures that appear to target Russian-speaking individuals or […]
The post HumanitarianBait campaign uses GitHub Releases to host Python infostealer payloads appeared first on VPN Central.
Discussion in the ATmosphere