Security · High impactFan score 47 · Tier B2 sources
Fake GitHub Security Tools Infect Over 2,000 PCs With Malware
Security Affairs · By Pierluigi Paganini ·
The Brief · written from 2 sources
- Fake security projects on GitHub are targeting cybersecurity professionals.
- The infected projects deploy a backdoor and an information-stealer malware.
- BleepingComputer reported the campaign on 2026-11-06.
Why it matters
Developers and security staff who download security tools from GitHub may be infected with a backdoor and credential-stealing malware, so they should verify tools before running them.
Who’s affected
- Cybersecurity professionals who download tools from GitHub
- #github
- #malware
- #infostealer
- #backdoor
- #supply-chain
Fake GitHub security tools are spreading malware that disables defenses, steals sensitive data and infects over 2,000 PCs. Cybersecurity firm Doctor Web has found malware hidden in GitHub projects that look like security tools. The campaign targets blockchain game fans and, more…
Timeline
BleepingComputer reports fake security tools on GitHub pushing backdoors and infostealers
BleepingComputer
Fake security tools on GitHub push backdoors and infostealers
Security Affairs
Fake GitHub Security Tools Infect Over 2,000 PCs With Malware
Full coverage · 2 sources
- 2h ago ↗
Security Affairs
Fake GitHub Security Tools Infect Over 2,000 PCs With Malware
- 3d ago ↗
BleepingComputer
Fake security tools on GitHub push backdoors and infostealers