Crypto Malware Spreads via Fake Repositories

Hackers Exploit GitHub with Malware-Laden Repositories

• Cybercriminals are using fake GitHub repositories to spread malware targeting software developers.
• Malware includes a clipboard hijacker that replaces crypto wallet addresses with those controlled by attackers.
• Affected wallets received approximately 5 BTC, valued at about $443,000 as of November 2024.
• Sensitive information like passwords and banking details is sent to hackers via Telegram.
• The GitVenom campaign has primarily impacted Russia, Brazil, and Turkey.

Hackers are increasingly targeting developers through deceptive GitHub repositories, with one campaign resulting in the theft of around 5 BTC. The malware’s impact is notably concentrated in Russia, Brazil, and Turkey.