Fake security tools on GitHub push backdoors and infostealers to cybersecurity pros
Dr. Web reports campaign compromised over 2,000 Windows systems, uses modular loader to evade defenses
A campaign spreading fake security tools on GitHub has compromised more than 2,000 Windows systems by deploying backdoors and information-stealing malware, according to researchers at cybersecurity firm Dr. Web. The campaign, active for about two years, recently shifted from targeting crypto wallet users to cybersecurity professionals.