gitvenom

ChainCatcher news, according to Bitcoin.com, a covert malware campaign is hijacking cryptocurrency wallets by embedding malicious code in fake open-source projects on Github, tricking developers into executing hidden payloads.A cyber attack campaign named Gitvenom has been targeting Github users by embedding malicious code into seemingly legitimate open-source projects. Researchers Georgy Kucherin and Joao Godinho discovered this operation, where cybercriminals create fraudulent repositories that mimic real software tools. The method of embedding malicious code varies depending on the programming language used in the fake projects.

ChainCatcher news, according to CoinDesk, Kaspersky has discovered that hackers are using GitHub for "GitVenom" attacks, which have been active for at least two years and are on the rise. Hackers create GitHub repositories disguised as legitimate projects, such as Telegram bots for managing Bitcoin wallets or computer game tools, but they hide malicious code within them.Attackers use Python and JavaScript code to implant Trojan viruses, which steal passwords, encrypted wallet information, and hijack Bitcoin transaction addresses after infecting victims' devices. In November 2024, a developer lost over $400,000 in Bitcoin due to this attack. GitVenom primarily affects countries such as Russia, Brazil, and Turkey, and continues to spread globally.Kaspersky advises developers to carefully review the authenticity of projects before running code, and to be wary of overly optimized README files and suspicious code commit histories.