AI Summary

Cybersecurity professionals are being targeted with infected security projects on GitHub that deploy a backdoor and information stealer malware. The campaign began about two years ago and initially focused on crypto wallet users. Recently, the threat actor shifted tactics, publishing malicious repositories that automate scans, security testing, and log analysis. These repositories contain code that installs the backdoor and steals sensitive information from users who clone or run them. The shift indicates a broader attempt to compromise security tools used by professionals.

AI summaries can be wrong sometimes—always verify important details using the source article.