Threat Actor Exploit GitHub and Hosted 60 GitHub Repositories with 100s of Malware

GitHub hit by a sophisticated malware campaign as ‘Banana Squad’ mimics popular repos

A threat group dubbed “Banana Squad,” active since April 2023, has trojanized more than 60 GitHub repositories in an ongoing campaign, offering Python-based hacking kits with malicious payloads. Discovered by ReversingLabs, the malicious public repos each imitate a well-known hacking tool to look legitimate but inject hidden backdoor logic.

67 Trojanized GitHub Repositories Found in Campaign Targeting Gamers and Developers

网络安全研究人员发现67个伪装成Python工具的GitHub仓库，实则包含恶意软件。这些仓库模仿合法项目名称，传播后门程序和信息窃取工具。攻击目标包括游戏外挂、账户清理工具等用户。GitHub已成为恶意软件分发的重要平台。

200+ Trojanized GitHub Repositories Found in Campaign Targeting Gamers and Developers

Cybersecurity researchers have uncovered a new campaign in which the threat actors have published more than 67 GitHub repositories that claim to offer Python-based hacking tools, but deliver trojanized payloads instead. The activity, codenamed Banana Squad by ReversingLabs, is assessed to be a continuation of a rogue Python campaign that was identified in 2023 as targeting the Python Package

Banana Squad Hides Data-Stealing Malware in Fake GitHub Repositories

Banana Squad hid data-stealing malware in fake GitHub repos posing as Python tools, tricking users and targeting sensitive info like browser and wallet data.

Threat Actor Exploit GitHub and Hosted 60 GitHub Repositories with 100s of Malware

A threat actor group known as Banana Squad has been found exploiting GitHub, a cornerstone platform for developers worldwide, by hosting over 60 malicious repositories containing hundreds of trojanized Python files. Discovered by the ReversingLabs threat research team, this campaign represents a shift toward stealthier and more sophisticated tactics in open-source exploitation. Sophisticated Supply Chain […] The post Threat Actor Exploit GitHub …

Threat actor Banana Squad exploits GitHub repos in new campaign

Introduction to Malware Binary Triage (IMBT) Course Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor. Enroll Now and Save 10%: Coupon Code MWNEWS10 Note: Affiliate link – your…