Thousands of GitHub Repositories Deliver Fake PoC Exploits with Malware

Bill Toulas, *BleepingComputer*, 23 Oct 2022,
via ACM TechNews, 24 Oct 2022

Researchers at the Leiden Institute of Advanced Computer Science in the
Netherlands discovered thousands of GitHub repositories offering fake
proof-of-concept (PoC) exploits for various vulnerabilities, including
malware. The researchers analyzed slightly more than 47,300 repositories
promoting exploits for vulnerabilities disclosed between 2017 and 2021 using
Internet Protocol (IP) address analysis, binary analysis, and hexadecimal
and Base64 analysis. Over 2,800 of 150,734 unique IPs extracted matched
blocklist entries, 1,522 …

exploits fake github github repositories malware poc repositories