FakeGit malware campaign returns with 17,610 malicious GitHub repos
Over 17,000 fake GitHub repositories have been deployed to distribute the SmartLoader malware and StealC infostealer.
The cybersecurity landscape faces a renewed threat as the FakeGit malicious campaign has reactivated, deploying an unprecedented number of fraudulent repositories across the GitHub platform.
According to BleepingComputer reports, the campaign ramped up earlier this month, actively distributing the SmartLoader malware. This malicious loader is specifically designed to drop the notorious StealC infostealer onto compromised machines.
Security researchers have identified a staggering 17,610 malicious repositories involved in this operation. These fake repos aim to trick developers searching for popular open-source tools into downloading trojanized software.
For the global developer community, including IT specialists in developing tech hubs, this campaign highlights the growing risks associated with blindly trusting public code repositories. Verifying package authenticity has never been more critical.
Experts advise developers to thoroughly vet sources before cloning repositories or installing external dependencies, use multi-factor authentication, and maintain robust endpoint protection to mitigate these supply chain risks.
