GitHub users targeted by dangerous new phishing threat

Date:
Wed, 13 Nov 2024 20:04:00 +0000

Description:
Golssue tool targets GitHub users specifically, allowing crooks to extract emails in bulk.

FULL STORY ======================================================================Research ers discover Golssue - a new tool for extracting GitHub user emails It is being sold for $700 on the dark web Such a high-precision tool could lead to dangerous supply chain attacks

GitHub users are allegedly being targeted in a brand new phishing campaign, according to SlashNext.

The company recently published an article titled GoIssue The Tool Behind Recent GitHub Phishing Attacks, detailing the tool, which, from the headline, appears to have already been put to use.

However, the articles body mostly discusses the potential risks and the ways it could be used to facilitate targeted phishing campaigns and other cyber attacks. It outlines the features of GoIssue and how attackers "could" use it to target GitHub users, suggesting hypothetical scenarios rather than confirming any specific incidents where the tool has been deployed. Discount for early adopters

In any case, Golssue is definitely a sophisticated hacking tool, and GitHub users should be on their guard.

SlashNext claims Golssue can extract email addresses from public GitHub profiles, and send bulk emails directly to peoples inboxes. That way, crooks could craft highly targeted, convincing phishing emails, which could result
in GitHub users losing access to their profiles, or having projects compromised with malware in supply-chain attacks.

"Whether you're aiming to reach a specific audience or expand your outreach, GoIssue offers the precision and power you need," Golssues developer, a
threat actor called cyberdluffy said in an ad posted on the dark web.

To purchase a custom build of the tool, you will need to pay $700. Access to the source code can also be acquired, but for $3,000. TheHackerNews found on October 11, the developer slashed the prices to $150 and $1,000 respectively
- for the first five customers. So, we might assume that no groups used it just yet.

GitHub is a web-based platform that provides version control and
collaboration features for software development projects. It is extremely popular, and as such, often targeted by various criminal groups.

Via SlashNext You might also like D-Link routers are being hacked to steal customer passwords but it says there is no patch Here's a list of the best firewalls today These are the best endpoint protection tools right now



======================================================================
Link to news story: https://www.techradar.com/pro/security/github-users-targeted-by-dangerous-new- phishing-threat


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)