Fake LastPass Authenticator on GitHub Pushes Rapuncel Infostealer
A malicious campaign leverages SEO-optimized GitHub repositories to impersonate popular software and distribute a new infostealer dubbed Rapuncel.
Cybersecurity researchers have uncovered an ongoing malware campaign that uses SEO-optimized GitHub repositories to deceive users. Attackers are impersonating well-known software firms to make their malicious content appear legitimate.
The campaign's primary payload is a previously undocumented information stealer named Rapuncel. This malware is specifically designed to harvest sensitive data from victims who fall for the spoofed downloads.
By utilizing search engine optimization techniques, the threat actors ensure their fake LastPass Authenticator repositories rank prominently in search results, increasing the chances of successful infection.
This tactic highlights the growing risks associated with software supply chains and open-source platforms. Developers and organizations globally must remain vigilant against sophisticated social engineering threats on code-sharing sites.
Security experts advise users to download applications only from official vendor websites and to verify the authenticity of any repository or package before integrating it into their workflows.
