Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer
-
A malware campaign is currently abusing SEO-optimized GitHub repositories to impersonate well-known software vendors, including LastPass, in order to distribute a previously undocumented information stealer tracked as Rapuncel.
The attackers set up fake repositories that appear in search results for popular security and authentication tools, tricking users into downloading what they believe is legitimate software. Once executed, the payload deploys the Rapuncel infostealer, which is designed to harvest sensitive data from compromised systems.
Key points for defenders:
- The campaign relies on GitHub repositories that are optimized for search engines, making malicious results rank prominently for brand-related queries.
- LastPass Authenticator is among the impersonated products, alongside other well-known software firms.
- The delivered malware, Rapuncel, was previously undocumented prior to this campaign.
- Users searching for legitimate download links may be redirected to attacker-controlled repositories hosting the stealer.
To reduce exposure, security teams and end users should:
- Only download software from official vendor websites and verified distribution channels.
- Treat GitHub search results with caution when looking for branded installers or authenticator apps.
- Monitor endpoints for unexpected executable downloads originating from repository links.
- Educate users on typosquatting and SEO-poisoning tactics used in these campaigns.
Source: Unknown
Has anyone in the community observed fake GitHub repos pushing Rapuncel or similar stealers in their environment?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login