Researchers uncover ring of GitHub accounts promoting 300+ backdoored apps

guest · Mar 4, 2019

Researchers uncover ring of GitHub accounts promoting 300+ backdoored apps
March 4, 2019
https://www.zdnet.com/article/resea...ithub-accounts-promoting-300-backdoored-apps/

A security researcher has uncovered a ring of malicious GitHub accounts promoting over 300 backdoored Windows, Mac, and Linux applications and software libraries.

In the samples analyzed by the security team at DFIR.it, the malicious apps downloaded a Java-based malware named Supreme NYC Blaze Bot (supremebot.exe).
According to researchers, this appeared to be a "sneaker bot," a piece of malware that would add infected systems to a botnet that would later participate in online auctions for limited edition sneakers.

The DFIR.it investigation into this network of backdoored apps started when researchers spotted a malicious version of the JXplorer LDAP browser.
Most users of the listed apps are safe unless they went out of their way to download the apps from outside the official websites and landed on any of the malicious GitHub repos by accident.
Click to expand...

Log in or Sign up

Researchers uncover ring of GitHub accounts promoting 300+ backdoored apps

guest Guest

Log in or Sign up

Researchers uncover ring of GitHub accounts promoting 300+ backdoored apps

guest Guest

Useful Searches