• GitHub comments used to distribute malware (BleepingComputer)

    From LWN.net@1337:1/100 to All on Wed Apr 24 14:30:06 2024
    GitHub comments used to distribute malware (BleepingComputer)

    Date:
    Wed, 24 Apr 2024 14:25:25 +0000

    Description:
    BleepingComputer reported on April 20 that some malware was being distributed via GitHub.
    Uploading files as part of a comment gives them a URL that appears to be associated with a repository, even if the comment is never posted. A GitHub flaw, or possibly a design decision, is being abused by threat actors
    to distribute malware using URLs associated with Microsoft repositories, making
    the files appear trustworthy. While most of the malware activity has been based around the Microsoft GitHub
    URLs, this "flaw" could be abused with any public repository on GitHub, allowing
    threat actors to create very convincing lures.

    ======================================================================
    Link to news story:
    https://lwn.net/Articles/971008/


    --- Mystic BBS v1.12 A47 (Linux/64)
    * Origin: tqwNet UK HUB @ hub.uk.erb.pw (1337:1/100)