LEGALAUDIT

Radar de estafas

Como reconocer Nearly 300 fake GitHub repos impersonate legitimate software to deliver infostealer malware?

Publicado el

TLDR

Researchers at Arctic Wolf uncovered a campaign in which 292 fake GitHub repositories posed as well known security products, cryptocurrency tools, developer utilities, and other popular software. Each repo included a README linking to a...

Como funciona

Researchers at Arctic Wolf uncovered a campaign in which 292 fake GitHub repositories posed as well known security products, cryptocurrency tools, developer utilities, and other popular software. Each repo included a README linking to a...

Señales de alerta

  • Unsolicited GitHub link found via search engine or social post claiming to offer premium or "free" software. Landing page with hollow trust badges, stock branding, and a button such as "Download Secure Content" asking for an immediate download. A ZIP archive whose payload changes every minute, containing an unsigned or unusually named .dll next to a known updater binary

Qué hacer

  1. 1No hagas clic, no pagues, no instales apps ni compartas codigos.
  2. 2Verifica desde el sitio, la app o el numero oficial escrito manualmente.
  3. 3Si ya interactuaste, bloquea tarjetas o cuentas y denuncia el incidente.

Fuente

bleepingcomputer

Fuente verificada por Mythos Forensic Team

https://www.bleepingcomputer.com/news/security/nearly-300-github-repos-pose-as-legit-software-to-push-malware/

FAQ

Es Nearly 300 fake GitHub repos impersonate legitimate software to deliver infostealer malware una estafa real?

Si. Trata el mensaje, la llamada o la solicitud de pago como sospechosos hasta que los verifiques por un canal oficial.

Cuales son las primeras senales?

Unsolicited GitHub link found via search engine or social post claiming to offer premium or "free" software. Landing page with hollow trust badges, stock branding, and a button such as "Download Secure Content" asking for an immediate download. A ZIP archive whose payload changes every minute, containing an unsigned or unusually named .dll next to a known updater binary

Que debo hacer primero?

No hagas clic, no pagues, no instales apps ni compartas codigos.; Verifica desde el sitio, la app o el numero oficial escrito manualmente.; Si ya interactuaste, bloquea tarjetas o cuentas y denuncia el incidente.

Puede LegalAudit revisar mi caso?

Si. Abre el chat gratis y pega el mensaje, el enlace, el remitente o los datos de pago para un triage.