A continuous malware campaign is leveraging SEO-poisoning techniques on GitHub to impersonate legitimate software brands, distributing a previously undocumented information stealer named Rapuncel. The malicious repositories target users searching for developer tools and enterprise software. Security teams should audit code repositories and monitor for unauthorized software distributions.
READ THE ORIGINAL ARTICLE AT BLEEPINGCOMPUTER.COM →