New Infostealer Campaign Uses GitHub Releases for Payload Hosting and Evasion

A newly discovered cyberespionage campaign is using a deceptively simple tactic to slip past security defenses: disguising malware as a humanitarian aid request while hiding the real payload on GitHub. Researchers have named this operation “HumanitarianBait,” and it is far more capable than its plain-looking lure suggests. The campaign starts with a phishing email carrying […] The post New Infostealer Campaign Uses GitHub Releases for Payload Hosting and Evasion appeared first on Cyber Security News.