Fake GitHub security tools drop AsyncRAT and a stealer at researchers
Dr.Web says a two-year GitHub campaign now baits security pros with bogus scanner and log-analysis tools, dropping AsyncRAT, a clipper and a stealer via an Electron loader. 2,000+ Windows hosts hit.