SmartLoader

FakeGit Campaign Returns with 17,610 Malicious GitHub Repositories to Spread Information-Stealing Malware

The FakeGit campaign has resumed activity through 17,610 fake GitHub repositories, using convincing README files and download buttons to distribute SmartLoader and then other malware. Researchers say that relying on the removal of specific repositories or links is insufficient to contain the campaign because of backups and multiple hosting locations.