Cybersecurity researchers have spotted a 3,000-account network on GitHub that is manipulating the platform and spreading ransomware and info stealers.
A secretive network of around 3,000 “ghost” accounts on GitHub has quietly been manipulating pages on the code-hosting website to promote malware and phishing links, according to new research seen by
. Since at least June last year, according to researchers at cybersecurity company Check Point, a cybercriminal they dubbed “Stargazer Goblin” has been hosting malicious code repositories on the Microsoft-owned platform. GitHub is the world’s largest open-source code website, hosting millions of developers' work. As well as uploading malicious repositories, Stargazer Goblin has been boosting the pages by using GitHub’s own community tools.
previously reported on other GitHub black markets. The Stargazers Ghost Network, which Check Point named after one of the first accounts they spotted, has been spreading malicious GitHub repositories that offer downloads of social media, gaming, and cryptocurrency tools. For instance, pages might be claiming to provide code to run a VPN or license a version of Adobe's Photoshop.
use variations on 'instagram-follower' and 'youtube-views' tags, with the names changed based on the software the page alleges to offer. “Users of GitHub, and especially inexperienced users, can easily download malicious code, which can often be the result of fictitious reviews and starring,” says Jake Moore, global cybersecurity adviser at security firm Eset.
Hacking Malware Security Vulnerabilities Ransomware Github
United Kingdom Latest News, United Kingdom Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
How to Create a Dashboard to Track Your Twitter/X Follower Stats With APIs and GitHub ActionsComplete tutorial using X API, Node.js, GitHub Actions & GitHub Pages, Chart.js
Read more »
Your Network, Your Net Worth: 3 Tips to Network BetterSo, here's the playbook I developed to network better: (1) Become a Talent Scout, (2) Curate Your Personal Board of Directors, and (3) Become a 'Reverse Mentor.
Read more »
How to Leverage GitHub Copilot Chat Syntax: Chat Participants, Chat Variables, and Slash CommandsGitHub Copilot Chat is an incredibly powerful and useful feature that allows you to chat with or about your code.
Read more »
Your Ideal Coworker: How To Develop an Innovative Product With a Help of Generative AILearn how AI tools like GitHub Copilot, Viable, and Adobe Sensei are transforming business operations.
Read more »
The lawsuit against Microsoft, GitHub and OpenAI that could change the rules of AI copyrightMicrosoft, GitHub, and OpenAI are being sued for allegedly violating copyright law in the creation of GitHub Copilot — an AI coding assistant trained on open-source code. In an interview with The Verge, the lawyers filing the suit explain their motivations and the future of AI copyright.
Read more »
The developers suing over GitHub Copilot got dealt a major blow in courtA California judge dismissed many of the claims outlined in a copyright lawsuit that accuses GitHub, Microsoft, and OpenAI of copying developers’ code.
Read more »