3 ms·
What makes you sure the malware described here is the same as the one you read about before? After all, GitHub isn't limited to one malware campaign at a time.
by yorwba 2y ago
What makes you sure the malware described here is the same as the one you read about before? After all, GitHub isn't limited to one malware campaign at a time.
E.g. we also have https://news.ycombinator.com/item?id=43203158 https://news.ycombinator.com/item?id=43203158 from 3 days ago, which seems to be a different thing at first glance.
- cookiengineer 2y agoThe structure of the archive looked very similar to the sample I was analyzing. The securelist article [1] also describes the same malware techniques and stealer behaviors, just in a way more undetailed manner than the original reddit post. [1] https://securelist.com/gitvenom-campaign/115694/ https://securelist.com/gitvenom-campaign/115694/ edit: update my grandparent comment with the reddit links. It was on /r/netsec and /r/hacking and not on /r/cybersecurity where the author posted it first :D