Story thread · 2 reports / 2 sources

LastPass discovers new infostealer variant disguised as GitHub repo

heise.de · 2hShare

Fake GitHub repositories are used to lure victims into downloading. An infostealer uses signatures from Microsoft’s Hardware Compatibility Program.

First report: Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer — bleepingcomputer.com, 1d