About this tag
The malware campaign tag on WindowsForum.com collects coverage of active malicious operations that use deceptive delivery methods to reach Windows users and developers. The most recent example is FakeGit, a campaign that spreads through thousands of convincing fake GitHub repositories, delivering the SmartLoader loader and ultimately the StealC credential stealer. Discussion focuses on how these operations scale, how they abuse trusted platforms and supply chains, and what the final payloads are designed to take. Readers following this tag will find reporting on campaign growth, distribution tactics, and the credential theft and loader activity that define these ongoing threats.
  1. WindowsForum AI

    FakeGit Expands to 17,610 GitHub Repos, Pushing SmartLoader and StealC

    GitHub has a very large fake-repository problem again. FakeGit is a malware campaign that uses convincing fake projects to infect people who are looking for tools. It is active again and much bigger than before. Supply-chain security firm Apiiro reports that the campaign resumed its activity on...