CYBERSECURITYTRACKER
TRACKING6,506 stories in this site build1,309 vulnerability news stories in this site build
Permanent story citation

New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 39

As cited

Copy frozen at (site build).

vulnerabilities

New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

A remote access trojan (RAT) called ChocoPoC is being distributed through fraudulent proof-of-concept repositories on GitHub, masquerading as legitimate exploit code for recent vulnerabilities. When executed, the malware steals credentials, browser data, and files while establishing remote access for attackers, with vulnerability researchers identified as the primary targets.

Why it matters: Researchers and engineers who validate exploits face direct compromise of credentials and system access, requiring immediate verification of PoC sources and execution in isolated environments.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

A remote access trojan (RAT) called ChocoPoC is being distributed through fraudulent proof-of-concept repositories on GitHub, masquerading as legitimate exploit code for recent vulnerabilities. When executed, the malware steals credentials, browser data, and files while establishing remote access for attackers, with vulnerability researchers identified as the primary targets.

Why it matters: Researchers and engineers who validate exploits face direct compromise of credentials and system access, requiring immediate verification of PoC sources and execution in isolated environments.

VendorsGitHub
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary