GitHub Projects Used to Steal Cryptocurrency
- The “GitVenom” campaign has been active for at least two years.
- Malicious code is planted in fake GitHub projects, often targeting crypto-focused applications.
- Attackers use AI-generated README files to build trust while hiding harmful scripts.
- Affected users are primarily in Russia, Brazil, and Turkey, but the threat is global.
- One compromised wallet received 5 BTC, valued at $485,000 in November alone.
The GitVenom campaign exploits fake GitHub projects with malicious code to steal cryptocurrency. It has been active for over two years and primarily affects users in Russia, Brazil, and Turkey. One hacked wallet received 5 BTC worth $485,000.
Source (2.6)https://www.coindesk.com/tech/2025/02/26/hackers-are-using-fake-github-code-to-steal-your-bitcoin-kaspersky?rand=52298
