Multiple posts describe campaigns using GitHub repositories as C2 infrastructure, including DPRK linked activity leveraging private repos to evade detection and maintain persistence.
FortiGuard notes DPRK-linked campaigns using LNK files and GitHub C2 to evade detection, exfiltrating system data and maintaining persistence via scheduled tasks and C2 from private GitHub repositories.
GitHub Used as Covert Channel in Multi-Stage Malware Campaign
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new expert voices, debates, and emerging ideas.
← Back to Cyber Security