Security · High impactFan score 47 · Tier B
Fake security tools on GitHub push backdoors and infostealers
BleepingComputer · By Bill Toulas ·
The Brief
- Fake security projects on GitHub are targeting cybersecurity professionals.
- The infected projects deploy a backdoor and an information-stealer malware.
- BleepingComputer reported the campaign on 2026-11-06.
Why it matters
Developers and security staff who download security tools from GitHub may be infected with a backdoor and credential-stealing malware, so they should verify tools before running them.
Who’s affected
- Cybersecurity professionals who download tools from GitHub
- #github
- #malware
- #infostealer
- #backdoor
- #supply-chain
Cybersecurity professionals are being targeted with infected security projects on GitHub that deploy a backdoor and information stealer malware. [...]
Timeline
BleepingComputer reports fake security tools on GitHub pushing backdoors and infostealers
BleepingComputer
Fake security tools on GitHub push backdoors and infostealers