A malware campaign using AI to create deceptive GitHub repositories has been identified, distributing SmartLoader that deploys Lumma Stealer. This operation exploits GitHub’s reputation, targeting users seeking software through polished documentation. The malware executes a multi-stage attack, exfiltrating sensitive data like browser credentials and cryptocurrency information. Trend Micro suggests robust defenses, including application allowlisting and enhanced monitoring against these threats.
Thousands Of Vulnerable TP-Link Routers Targeted By Ballista Botnet
The Ballista botnet has compromised over 6000 TP-Link Archer AX-21 routers through a high-severity remote code execution flaw, according to The Hacker News. The botnet,
