Fake security tools on GitHub push backdoors and infostealers

Dr. Web researchers found a two-year-old campaign that has shifted from crypto lures to fake security projects on GitHub — scanner-output parsers, testing and log-analysis tools — aimed at cybersecurity professionals. Malicious code hidden in Visual Studio project files, Python and Go sources delivers the AsyncRAT backdoor, a crypto clipper and an infostealer that exfiltrates browser data, VPN and FTP settings and Discord tokens via Telegram; more than 2,000 Windows systems have been compromised.