The FakeGit malware campaign has resumed operations, using 17,610 malicious GitHub repositories to distribute SmartLoader. The latest wave uses the loader to deliver StealC, malware designed to steal information. Researchers at software supply-chain security firm Apiiro traced the renewed activity to October 4. Although the operation relies mainly on disposable accounts, they also identified at…
The FakeGit malware campaign has used more than 7,600 malicious GitHub repositories to spread SmartLoader and StealC malware. Public download counters recorded over 14 million download events across parts of the operation. However, that figure does not represent confirmed infections. It includes repeated downloads and automated requests. Researchers say the campaign increasingly targets developers and…