Distribution via GitHub
StealC profileCheck Point uncovered a network of GitHub repositories, boosted with fake stars, that distributed malware, using repository and account relationships in open sources. Check Point Research
(OSINT)
Producing intelligence from information collected from publicly available sources such as websites, registration databases, social media and code repositories.
Attackers and defenders use the same open sources. MITRE ATT&CK lists searching open websites and domain registration records among an attacker’s reconnaissance techniques. MITRE ATT&CK
On the defensive side, open sources help to understand who registered malicious domains, when, and which infrastructure they are linked to. MITRE ATT&CK
Which domain, person or infrastructure is being investigated.
Domain registrations, certificate records, code repositories. MITRE ATT&CK
It is compared across multiple sources and recorded.
Check Point uncovered a network of GitHub repositories, boosted with fake stars, that distributed malware, using repository and account relationships in open sources. Check Point Research
See your firm's attack surface on one screen: how many findings, at which severity, on which domain.
We use cookies to ensure proper operation of our website, analyze usage, and deliver relevant content and advertisements. You can manage your preferences at any time. Cookie Policy