Security company: Hackers are using fake GitHub projects to steal Cryptocurrency, users are advised to carefully check the behavior of third-party code before downloading.

ChainCatcher message, according to Cointelegraph, cybersecurity company Kaspersky recently released a study showing that Hackers are creating hundreds of fake projects on the GitHub platform to deceive users into downloading malware that steals Crypto Assets and credentials. Kaspersky has named this malware activity “GitVenom”. Kaspersky analyst Georgy Kucherin pointed out in a report on February 24 that these fake projects include Telegram bots that manage Bitcoin wallets and automated tools for interacting with Instagram accounts. Hackers carefully design project description documents, may use AI tools to generate content, and artificially increase the number of project ‘submissions’ to make the project appear to be actively under development. According to Kaspersky’s investigation, these malicious projects can be traced back to at least two years ago. Regardless of how the projects are presented, they all contain malicious components, such as tools for stealing information uploaded by users through Telegram, cryptocurrency wallet data, and browsing history, as well as clipboard hijackers that replace encryption wallet addresses. In November 2023, a user lost 5 bitcoins (about 442,000 US dollars) as a result. Kaspersky recommends that users carefully check the behavior of third-party code before downloading.