Research reports
1,224 reports from 387 publishers45 added in the past week
2 reports, newest added first
Added Tue 12 May
New BoryptGrab Stealer Targets Windows Users via Deceptive GitHub Pages
The BoryptGrab campaign uses fake SEO‑optimized GitHub repositories and deceptive download pages to distribute a data‑stealing malware family that delivers multiple payloads, including a reverse SSH backdoor, to Windows users. Save to Folio Key Takeaways…
MalwareInfostealers
Added Wed 6 May
Weaponizing Trust Signals: Claude Code Lures and GitHub Release Payloads
Anthropic inadvertently exposed internal Claude Code source material via a misconfigured npm package, which included approximately 512,000 lines of internal TypeScript and triggering rapid mirroring across GitHub. Within 24 hours, threat actors took advantage…
Infostealers
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.