How Threat Actors Can Use GitHub Repositories to Deploy Malware | CrowdStrike
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Direct Model Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Malicious File - T1204.002 Malicious Link - T1204.001 Malvertising - T1583.008 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 Remote Access Tools - T1219
Show in Graph
Common Information
Type Value
UUID bf751577-4183-4877-8519-e1b7737dc8fa
Fingerprint ac653a1eef720bab
Analysis status DONE
Considered CTI value 0
Text language
Published Nov. 7, 2024, midnight
Added to db Nov. 12, 2024, 11:51 a.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline “Gitting” the Malware: How Threat Actors Use GitHub Repositories to Deploy Malware
Title How Threat Actors Can Use GitHub Repositories to Deploy Malware | CrowdStrike
Detected Hints/Tags/Attributes 56/2/2
Source URLs
Redirection Url
Details Source https://www.crowdstrike.com/en-us/blog/how-threat-actors-use-github-repositories-to-deploy-malware/
URL Provider
Details Provider Source level domain
Details crowdstrike.com www.crowdstrike.com
Attributes
Details Type #Events CTI Value
Details File 27 
client32.exe
Details File 2125 
cmd.exe