Cybersecurity & Data Protection
2
UPVOTE
thehackernews.com

FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware

Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificial intelligence (AI) skills or Model Context Protocol (MCP) servers to deliver a malware family known as SmartLoader as part of an ongoing campaign codenamed FakeGit. "FakeGit uses copied projects, lookalike developer profiles, convincing READMEs, and malicious ZIP
FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
Thanakorn Boon

Thanakorn Boon

16d ago
2 0

Discussion

Begin the discussion

Begin something meaningful by sharing your ideas.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

g_richard

Golden Greta

Golden GretaUpvoted 16d ago1 comments · 44 shares
BA

Maria Bakker

Maria BakkerUpvoted 16d ago6 comments · 161 shares

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

bleepingcomputer.com
Attackers conceal phishing lures using invisible Unicode charac…

Threat actors have adopted the ASCII smuggling technique in phishing campaigns, using invisible Unicode characters to evade email security filters. [. .. ]
PR

phoebe rn

2026-09-06 17:43
0
thehackernews.com
Attackers Hijack MikroTik Routers Through Internet-Exposed SSH …

Attackers are exploiting MikroTik routers with their Secure Shell (SSH) remote-access service, which is reachable from the internet, to gain full administrativ…
TN

The Hacker News

30m ago
0
thehackernews.com
Unpatched Magento and Adobe Commerce Zero-Day Exploited to Back…

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's server…
SA

SariMartinez

18h ago
0
bleepingcomputer.com
Over 5,400 hacked sites serve ClickFix payloads stored on the b…

A massive cybercriminal operation is leveraging thousands of compromised small-business websites to deliver ClickFix payloads stored in smart contracts on the…
RM

ryan maybe

1d ago
0
bleepingcomputer.com
OpenAI admits it didn't disclose rogue AI wiki hijacking incide…

OpenAI admits it did not disclose an incident where autonomous AI agents hijacked a German wiki, created 18, 000 posts, shared answers, and bypassed restrictio…
Thanakorn Boon

Thanakorn Boon

1d ago
0
schneier.com
Friday Squid Blogging: Squid on a Stick at the New York State F…

Looks tasty. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.
SS

Schneier on Security

1d ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Attackers Hijack MikroTik Routers Through Internet-Exposed SSH …

Attackers are exploiting MikroTik routers with their Secure Shell (SSH) remote-access service, which is reachable from the internet, to gain full administrativ…
TN

The Hacker News

30m ago
0
thehackernews.com
Unpatched Magento and Adobe Commerce Zero-Day Exploited to Back…

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's server…
SA

SariMartinez

18h ago
0
thehackernews.com
Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Int…

A group of AI safety researchers says a fleet of autonomous agents that identified themselves as OpenAI systems left about 18, 000 posts on a dormant 25-year-o…
TN

The Hacker News

1d ago
0
thehackernews.com
Attackers Exploit PaperCut Flaws to Steal Credentials From Scho…

Threat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft in attacks targeting the education sector in the U. S. and Europ…
NightCurator

NightCurator

1d ago
0
thehackernews.com
Phishing Campaign Sends Millions of Emails Using Invisible Unic…

Microsoft is alerting of a "high-volume phishing campaign" that's using invisible Unicode tag characters to bypass email filters. "Instead of using these char…
TN

The Hacker News

1d ago
0
thehackernews.com
ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth …

The worst part is how normal these attacks look. A call from IT. A shared file. A trusted app. A simple request to click “Allow. ” Why break in when someone mi…
Noor Bakker

Noor Bakker

2d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest