Fake GitHub security tools: building a “scanner” was enough to infect over 2,000 PCs
Fake security tools published on GitHub hide a command that runs at build time, disables the antivirus and steals FTP, SSH and VPN access. The annotated trap, what gets stolen and five team rules.









