> TritonInfoSec News
Home / Oct 09, 2026 / Story
0
#10 BleepingComputer general October 08, 2026 at 17:10 UTC

FakeGit malware campaign returns with 17,610 malicious GitHub repos

By Bill Toulas

AI Summary

The FakeGit campaign reactivated in October 2026, creating over 17,610 malicious GitHub repositories distributing SmartLoader malware as a dropper for the StealC infostealer. The campaign's industrial-scale abuse of GitHub's trusted platform makes it particularly dangerous for developers who may inadvertently clone or reference the repositories as dependencies.

Read full article → https://www.bleepingcomputer.com/news/security/fak…

Relevance score: 72.0/100

# More from October 09

  1. 1
    Cisco warns of critical flaws allowing Nexus switch takeover BleepingComputer
  2. 2
    Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication SecurityWeek
  3. 3
    FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins BleepingComputer
  4. 4
    FBI disrupts Chinese hacking tools used to breach critical infrastructure BleepingComputer
  5. 5
    Oracle Health Data Breach Tally Climbs to Nearly 20 Million SecurityWeek
  6. 6
    FortiBleed Attackers Locking Victims Out of Fortinet Devices SecurityWeek
  7. 7
    ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms The Hacker News
  8. 8
    MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data The Hacker News
  9. 9
    Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains The Hacker News