As cited
Copy frozen at (site build).
threat intel
Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer
Threat actors created fake GitHub repositories that mimic legitimate software vendors to distribute a previously unknown information stealer called Rapuncel. The repositories use search engine optimization techniques to increase visibility and deceive users into downloading malware.
Why it matters: Developers downloading what they believe are official tools from GitHub risk installing infostealer malware that can exfiltrate credentials, tokens, and sensitive data from their systems and development environments.
- Source published
- First seen by Cybersecurity Tracker