Blog

• McAfee researchers find number of malicious GitHub repositories
• The repositories change every week, but always promise game cracks, hacks, or free access to commercial software
• But instead of the cracks, the victims get infected with Lumma Stealer

Cybercriminals are using GitHub to target children with infostealing malware, a new McAfee report has claimed, saying it spotted an ongoing malicious campaign on the popular code repository.

In an analysis, the researchers said they observed many repositories pretending to be game hacks, cracks, or free versions of otherwise commercial software. However, instead of providing these programs, the repositories were actually hosting Lumma Stealer, a known infostealer malware.