Fake LastPass authenticator GitHub repos push new Rapuncel infostealer

Fake LastPass authenticator GitHub repos push new Rapuncel infostealer

An ongoing malware campaign is using SEO-optimized GitHub repositories to impersonate well-known software companies in order to promote a previously undocumented information theft operation called Rapuncel. LastPass and Delphos Labs have uncovered the campaign in which they reportedly impersonate the password manager brand and at least 39 other companies. In addition to the Rapuncel infostealer, … Read more