Hackers Are Using Fake GitHub Repositories to Spread Malware and Steal Crypto—Here’s How to Stay Safe.
The research study from Kaspersky describes fake project tactics used to steal crypto through deceptive software downloads.
GitHub is a leading platform for developers who wish to share and synchronize their coding efforts. Unfortunately, hackers are taking advantage of its open nature. Kaspersky analyst Georgy Kucherin explains that hackers create fake repositories under “GitVenom.” These projects pose legitimate tools but steal crypto and personal data.
Some of the fake projects include:
Hackers use AI, fake updates, and inflated commits to make projects look legitimate. Once downloaded, the malware inside these projects activates. It steals data and scans for crypto wallet addresses, replacing them with hacker-controlled ones.
Once a victim downloads and installs the fake project, the malware copies sensitive data, including:
The stolen data gets to hackers through Telegram. A clipboard hijacker runs in the background, looking for crypto wallet addresses. If a user tries to copy and paste their wallet address, the malware swaps it with the hacker’s address, redirecting funds to the attackers.
According to Kaspersky, the GitVenom campaign targets users worldwide. However, it focuses more on Russia, Brazil, and Turkey. The fact that hackers have been running this scheme for at least two years suggests it has effectively tricked victims.
Hackers focus on GitHub because it has many developers. They will continue creating harmful projects. However, they will make minor strategic adjustments over time. Many steps exist to safeguard yourself against attacks:
All files downloaded from the internet must undergo a security scan before regular execution.
Hackers’ skill levels continue to advance, and they are using fake GitHub projects to steal crypto assets. Always stay alert while validating your download sources. Do not assume a secure appearance indicates project safety. Your crypto assets face more significant threats from theft, so a simple increase in caution will help defend them.
The information discussed by Altcoin Buzz is not financial advice. This is for educational, entertainment, and informational purposes only. Any information or strategies are thoughts and opinions relevant to the accepted levels of risk tolerance of the writer/reviewers and their risk tolerance may be different than yours. We are not responsible for any losses that you may incur as a result of any investments directly or indirectly related to the information provided. Bitcoin and other cryptocurrencies are high-risk investments so please do your due diligence. Copyright Altcoin Buzz Pte Ltd.
Casper Network is betting big on EVM support, AI payments, and quantum-safe blockchain infrastructure with its new multi-year roadmap.
Microsoft's bet on Space and Time is starting to pay off with the launch of Dreamspace, a no code app builder
Worldcoin's World ID is now live and updated. It's out to prove you are human when on the web instead of dealing with a bot.
🚨 ALERT: Hackers are making fake GitHub projects to steal crypto, according to Kaspersky. The hackers of the malware campaign called GitVenom have created hundreds of repositories on GitHub hosting fake projects that contain remote access trojans (RATs), info-stealers and Show more
GitHub users, be careful! GitVenom campaign uses fake projects to spread malware, stealing crypto and data. Verify repos before use: check code, READMEs, and commits; or stick to known, trusted repos. See more here: securelist.com/gitvenom-campa…
