Hundreds of GitHub repositories hijacked to trick users into downloading malware

• Kaspersky research finds “hundreds” of malicious GitHub commits
• Commits pretend to be useful software but trick victims into downloading malware
• At least one person lost 5 BTC because of the campaign

Cybersecurity researchers Kaspersky have iscovered a longstanding, widespread criminal campaign targeting software developers with information-stealing malware.

Kaspersky said it observed hundreds of fake GitHub repositories, some posing as tools and automation mechanisms, others as hacks and cracks, that were actually delivering different sorts of malware to their victims. They dubbed the campaign ‘GitVenom’. Apparently, someone has been very thorough, carefully setting up commits, writing accompanying documentation and readme files, all in order to avoid being flagged as malware.