Fake zero-day PoC exploits on GitHub push Windows, Linux malware

Syndicated from the fediverse. Read and engage on the original instance.

Fake zero-day PoC exploits on GitHub push Windows, Linux malware

Someone created a bunch of github profiles impersonating real researchers alongside fake Twitter accounts. Pretty fascinating, really.

https://www.bleepingcomputer.com/news/security/fake-zero-day-poc-exploits-on-github-push-windows-linux-malware/Open link View original on infosec.pub

Comments3

3 replies

meli nasa

feddit.de

huh, this is weird. one would think people would use separate machines / vms to test zero day exploits, not their main machines.

execveat reply

infosec.pub

They're not even that stealthy. The code is bullshit, gitignore folder is super suspicious and malware is just a binary within the zip file. Clearly meant for script kiddies.

SHITPOSTING_ACCOUNT

feddit.de

Any attribution?