Threat actors are distributing malicious GitHub projects disguised as security utilities to infect developers with AsyncRAT, cryptocurrency clipboard hijackers, and information stealers. Doctor Web researchers reported more than 2,000 infected computers during their investigation, which was disclosed on November 5, 2026. The operation initially... Weiterlesen: Fake GitHub Security Tools Spread AsyncRAT Malware and Steal Sensitiv…
Intelligence View
⚡ tsecurity.de Intelligence
Fake GitHub Security Tools Spread AsyncRAT Malware and Steal Sensitive Data From Developers
Threat actors are distributing malicious GitHub projects disguised as security utilities to infect developers with AsyncRAT, cryptocurrency clipboard…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Zeka Digest - ücretsiz Günlük en önemli güvenlik haberi · herhangi bir zamanda alınabilir
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Hiçbir okuyucu henüz yorum yok
Bu sayfa yararlı mıydı?
0
Powered by tsecurity.de
tsecurity.de Hub
İlgili Story Cluster & Kaynaklar (vector AI)
18 Kaynaklar
CVE-2025-44595 | Halo up to 2.20.17 /halo_host/archives/ cross site scripting
17 diğer kaynaklar
VVulDB Updatesvor 7 Std.CVE-2025-55834 | JeeWMS up to 3.7 logController.do cross site scripting VVulDB Updatesvor 7 Std.CVE-2025-57117 | Rems Employee Management System 1.0 Add Department department.php Department Name cross site scripting VVulDB Updatesvor 7 Std.CVE-2025-56252 | ServitiumCRM 2.10 URL mobile cross site scripting VVulDB Updatesvor 7 Std.CVE-2025-56710 | PHPGurukul Student Result Management System 2.0 Profile Page /create-class.php cross-site request forgery VVulDB Updatesvor 10 Std.CVE-2025-57539 | Proxmox Virtual Environment 8.4 U2F Origin cross site scripting VVulDB Updatesvor 10 Std.CVE-2025-57540 | Proxmox Virtual Environment 8.4 WebAuthn Relying Party cross site scripting
+11
17 Kaynaklar
CVE-2026-17098 | IBM API Connect up to 10.0.8.12/12.1.1.2 information exposure (EUVD-2026-118628)
16 diğer kaynaklar
VVulDB Updatesvor 8 Std.CVE-2026-19128 | IBM API Connect up to 12.1.1.2 server-side request forgery (EUVD-2026-118799) VVulDB Updatesvor 8 Std.CVE-2026-17409 | IBM API Connect up to 10.0.8.12/12.1.1.2 access control (EUVD-2026-118789) VVulDB Updatesvor 8 Std.CVE-2026-17202 | IBM API Connect up to 12.1.1.2 information exposure (EUVD-2026-118654) VVulDB Updatesvor 8 Std.CVE-2026-17389 | IBM API Connect up to 10.0.8.12/12.1.1.2 ldap injection (EUVD-2026-118770) VVulDB Updatesvor 8 Std.CVE-2026-17323 | IBM API Connect up to 12.1.1.2 xml external entity reference (EUVD-2026-118714) VVulDB Updatesvor 8 Std.CVE-2026-17331 | IBM API Connect up to 12.1.1.2 path traversal (EUVD-2026-118722)
+10
14 Kaynaklar
CVE-2025-57071 | Tenda G3 15.11.0.17 formAddVpnUsers vpnUsers stack-based overflow
13 diğer kaynaklar
VVulDB Updatesvor 10 Std.CVE-2025-57072 | Tenda G3 15.11.0.17 formSetStaticRoute staticRouteGateway stack-based overflow VVulDB Updatesvor 10 Std.CVE-2025-57070 | Tenda G3 15.11.0.17 guestWifiRuleRefresh gstUp stack-based overflow VVulDB Updatesvor 10 Std.CVE-2025-57085 | Tenda W30E 16.01.0.19 UploadCfg v17 stack-based overflow VVulDB Updatesvor 10 Std.CVE-2025-57086 | Tenda W30E 16.01.0.19 formDeleteMeshNode String stack-based overflow VVulDB Updatesvor 10 Std.CVE-2025-57078 | Tenda G3 3.0br/15.11.0.17 formModifyPppAuthWhiteMac pppoeServerWhiteMacIndex stack-based overflow VVulDB Updatesvor 10 Std.CVE-2025-57087 | Tenda W30E 16.01.0.19 werlessAdvancedSet countryCode stack-based overflow
+7
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/tr/4325709/malware-trojanlar-viruesler/fake-github-security-tools-spread-asyncrat-malware-and-steal-sensitive-data-from-developers/