Trojanized Exploit & Malicious Package Delivery
Articles on malware delivered through weaponized proof-of-concept exploits, trojanized GitHub repositories, malicious PyPI packages, and supply-chain poisoning of developer toolchains — including RATs, infostealers, and downloader payloads hidden in dependency chains.
Fake GitHub Repos, Real Damage: A Case Study in AI Cybersecurity Threats
A threat actor published nearly 300 fake GitHub repositories impersonating legitimate software and security projects to distribute the BoryptGrab infostealer, collecting data from 19 browsers, 32 crypto wallets, and messaging apps before exfiltrating to a Russia-based C2 server.
The Evolution of Shai-Hulud: Anatomy of the Miasma Credential-Stealing Campaign
A detailed look at the Miasma attack framework, which leverages GitHub, credential-stealing, and AI-agent poisoning—following its brief intentional leak on GitHub—to propagate supply-chain attacks.
Microsoft Swiftly Remediates GitHub Repositories Compromised in Supply-Chain Campaign
Following a swift containment action, Microsoft restores 73 GitHub repositories after it was discovered they were being leveraged to distribute password-stealing malware in a supply-chain campaign.
Inside the New Wave of Hospitality-Targeted Phishing Campaigns
Recent phishing campaigns targeting the hospitality sector across Europe and Asia leverage sophisticated social engineering and persistence tactics, focusing on long-term remote access rather than immediate ransomware deployment.
ChocoPoC RAT: Stealthy Supply-Chain Poisoning via PyPI Dependencies in GitHub PoCs
A Python-based remote access trojan delivered by hijacking PyPI package dependencies within weaponized GitHub proof-of-concept exploits, targeting cybersecurity researchers with evasive malware injection techniques.