GitVenom Malware Steals $456K in Bitcoin Using Fake GitHub Projects to Hijack Wallets
Briefly

The GitVenom campaign, identified by Kaspersky, is a long-lasting threat aimed at gamers and cryptocurrency investors via fake open-source software on GitHub. It has led to the theft of significant assets, including 5 bitcoins, and involves a range of malicious tools masquerading as legitimate projects. The attackers leverage various programming languages to execute their payloads, which include credentials theft and remote access capabilities. The campaign has primarily impacted users in Russia, Brazil, and Turkey, highlighting the increasing risks associated with open-source projects and cybercriminal activities.
Cybersecurity researchers are raising alarms about the GitVenom campaign, which exploits gamers and cryptocurrency investors through fake open-source projects on GitHub.
The malicious GitHub projects, including tools for Instagram and Bitcoin wallets, aim to steal sensitive personal and banking information over an ongoing two-year period.
Read at The Hacker News
[
|
]