Get the latest tech news

A Hacker ‘Ghost’ Network Is Quietly Spreading Malware on GitHub


Cybersecurity researchers have spotted a 3,000-account network on GitHub that is manipulating the platform and spreading ransomware and info stealers.

Since at least June last year, according to researchers at cybersecurity company Check Point, a cybercriminal they dubbed “Stargazer Goblin” has been hosting malicious code repositories on the Microsoft-owned platform. Antonis Terefos, a malware reverse engineer at Check Point who discovered the nefarious behavior, says the persona behind the network uses their false accounts to “star,” “fork,” and “watch” the malicious pages. The Stargazers Ghost Network, which Check Point named after one of the first accounts they spotted, has been spreading malicious GitHub repositories that offer downloads of social media, gaming, and cryptocurrency tools.

Get the Android app

Or read this on Wired

Read more on:

Photo of malware

malware

Photo of network

network

Photo of GitHub

GitHub

Related news:

News photo

Hackers Shut Down Heating in Ukrainian City With Malware, Researchers Say

News photo

'GitHub Is Starting To Feel Like Legacy Software'

News photo

Hackers shut down heating in Ukrainian city with malware, researchers say