Hacking News2026-07-20·1 min read

FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware

Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificial intelligence (AI) skills or Model Context Protocol (MCP) servers to

CyberShield Team

2026-07-20

FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware

Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificial intelligence (AI) skills or Model Context Protocol (MCP) servers to deliver a malware family known as SmartLoader as part of an ongoing campaign codenamed FakeGit. "FakeGit uses copied projects, lookalike developer profiles, convincing READMEs, and malicious ZIP

Join the Discussion

Comments coming soon. Follow us on social media for real-time discussions.

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers

Hacking News

2026-07-231 min read

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers

Cybersecurity researchers have shed light on a large-scale campaign that has turned compromised GitHub repositories into distributed attack infrastructure designed to target cPanel and WebHost Manager

CyberShield TeamRead More

Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge

Hacking News

2026-07-231 min read

Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge

The Chaos ransomware group ran its command-and-control through the victim's own browser. Cisco Talos on Thursday detailed msaRAT, the Rust implant behind it, found on a compromised Windows machine ahe

CyberShield TeamRead More

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Hacking News

2026-07-231 min read

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

Check Point has released security updates to address multiple vulnerabilities impacting Security Management and Multi-Domain Management (MDSM) products, including a critical flaw that has come under a

CyberShield TeamRead More

← Previous

FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware

Tags

Join the Discussion

Related Articles

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers

Chaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Chrome and Edge

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050

Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign