cryptocurrency-stealing malware campaign uses fake GitHub stars, inflated download counts, and AI-narrated tutorials to trick users into downloading a Rust-based clipboard hijacker (clipper). The clipper swaps copied crypto wallet addresses for the attacker's own. Check Point Research found that the actor used ghost networks of fake accounts to create social proof across multiple platforms, including GitHub, SourceForge, and YouTube.
원문 보기 →