Cybersecurity & Data Protection
2
UPVOTE
thehackernews.com

FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware

Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificial intelligence (AI) skills or Model Context Protocol (MCP) servers to deliver a malware family known as SmartLoader as part of an ongoing campaign codenamed FakeGit. "FakeGit uses copied projects, lookalike developer profiles, convincing READMEs, and malicious ZIP
FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
Thanakorn Boon

Thanakorn Boon

1d ago
2 0

Discussion

Be the first to comment

Add your perspective to get the discussion started.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

g_richard

Golden Greta

Golden GretaUpvoted 14h ago1 comments · 56 shares
BA

Maria Bakker

Maria BakkerUpvoted 22h ago6 comments · 191 shares

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

darkreading.com
Optiv Launches CyberBOT Cybersecurity Awareness Training Progra…

Hands-on sessions provide educators, nonprofits, and community leaders with an accessible resource to foster year-round cyber awareness and build more resilien…
DR

Dark Reading

3h ago
0
krebsonsecurity.com
Widespread PHP Flaw May Cause Many Site Outages Today

Expect to see quite a few websites serving "404" or "Page Not Found" errors today: Nearly 70 percent of websites need to update their core software to fix a pa…
KS

Krebs on Security

3h ago
0
bleepingcomputer.com
PHP ships emergency patches for critical PHP2Shell flaws

The PHP security team released emergency security patches for two critical remote code execution (RCE) vulnerabilities (CVE-2026-109618 and CVE-2026-109619) tr…
SA

SariMartinez

4h ago
0
thehackernews.com
China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloadin…

Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed ta…
TN

The Hacker News

7h ago
0
thehackernews.com
PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP …

You cannot fully block the two critical PHP flaws called PHP2Shell before today's fix, and the one setting being passed around as a workaround is not enough on…
LK

Lars Khan

7h ago
0
bleepingcomputer.com
Microsoft says October updates didn’t actually fix VPN issues

Microsoft says it mistakenly flagged a bug causing Always On VPN connection issues as fixed in the October 2026 Windows 11 cumulative updates. [. .. ]
Nirano

Nirano

9h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloadin…

Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed ta…
TN

The Hacker News

7h ago
0
thehackernews.com
PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP …

You cannot fully block the two critical PHP flaws called PHP2Shell before today's fix, and the one setting being passed around as a workaround is not enough on…
LK

Lars Khan

7h ago
0
thehackernews.com
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthentic…

Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could…
SA

SariMartinez

1d ago
0
thehackernews.com
Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes A…

The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised,  Mozilla and Google's Chrome Root Progra…
TN

The Hacker News

1d ago
0
thehackernews.com
Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-…

An attacker used a contributor's GitHub account to replace the download archives on five existing releases of OVHcloud's command-line tool on Monday, October 1…
TN

The Hacker News

1d ago
0
thehackernews.com
Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoad…

Cybersecurity researchers have disclosed details of a ClickFix delivery platform called ROMULUS that's being used to distribute malware such as Legion Loader.…
TN

The Hacker News

1d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest