Lastpass, Malwarebytes, others targeted in Github

Hello gang, welcome to another blog post here on the tech blog. We’re in the midst of the Malwarebytesnewsletter where they talk about their product as well as others targeted in Mac attacks that are easily found on a site called GitHub.

This is a site popularized by open source programs with what I’d call little to no mderation, based on the fact we continue to see abuse of legitimate apps that are found on company web sites abused by forcing people to downloading by clicking a button with no idea on what they’re getting.

The web is a wild place these days, and this is why when someone tells me to get a program, I ask for a link. I don’t search it out anymore, just because I don’t know where I’m going and I did get bit by scareware once.

While Scareware is not the biggest threat, the whole threat landscape no matter what it is these days is now malware, and that, you don’t want.

There is also a very large list of applications which is not necessarily an exhaustive list within the article of other well known and not so well known applications.

A few in the list include: 1Password, a very popular password manager, ActiveCampaign, Audacity, another familiar editing program similar to Goldwave and others, Basecamp, and Charles Schwab.

As I said, there’s nore, but I tried to find some familiar names within this alphabetical list to show you what might be out there.

See if you can find the true web site to get these apps, or ask people or call the company if it is a popular one.

The article for this one is titled Fake Malwarebytes, LastPass, and others on GitHub serve malware so please feel free to read it and familiarize yourself with these apps and what they might do if you come across them.

The article does indicate that actors are using infostealers to get these wares on to the machine, as this is the fastest way for you to get infected while bypassing protections.

It won’t surprise me if Windows is somehow involved, but it isn’t explicit discussed herein.

This is going to get very interesting. What do you think?