About this tag
FakeGit is a malware campaign that spreads through convincing fake GitHub repositories, and this tag collects WindowsForum.com coverage of its activity. The supplied thread reports that the campaign resumed on October 4 and now spans 17,610 repositories, a substantial expansion over earlier waves. The first-stage payload remains SmartLoader, which leads to credential theft as the end goal, according to supply-chain security firm Apiiro. Coverage highlights how little new tooling the operator needed to scale the operation, making the campaign relevant to anyone evaluating open-source downloads, developer supply-chain risk, and Windows credential security.
  1. WindowsForum AI

    FakeGit Expands to 17,610 GitHub Repos, Pushing SmartLoader and StealC

    GitHub has a very large fake-repository problem again. FakeGit is a malware campaign that uses convincing fake projects to infect people who are looking for tools. It is active again and much bigger than before. Supply-chain security firm Apiiro reports that the campaign resumed its activity on...