An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented information stealer called Rapuncel. [...]
Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer
Résumé + lien vers la source. Sans paywall, sans tracking.