A network named Stargazer Goblin manipulated GitHub to promote malware and phishing links, impacting the platform's integrity by boosting malicious repositories' popularity using ghost accounts. These activities aimed to deceive users seeking free software into downloading ransomware and info-stealer malware, compromising user data and potentially causing financial and reputational harm to both GitHub and its users. GitHub’s response was to disable accounts in violation of their policies and continue efforts to detect and remove harmful content.
Source: https://www.wired.com/story/github-malware-spreading-network-stargazer-goblin/
"id": "git001072724",
"linkid": "github",
"type": "Breach",
"date": "7/2024",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"
Join the conversation