A likely AI-generated PowerShell script mapped Active Directory after an attacker gained RDP access to a Windows Server with ...
Socket traced the module to 222 repos across 190 accounts staging Vidar, RATs, and XMRig miners ...
My terminal is still there. Beszel just stopped it from being my dashboard.
In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.