BTC $84250.5941
ETH $1990.5397
XRP $2.3946
BNB $627.7397
SOL $130.3495
ADA $0.7115
DOGE $0.1688
TRX $0.2343
stETH $1986.1989
WBTC $84183.3742
LINK $14.2086
LEO $9.7716
TON $3.6163
USDS $0.9990
wstETH $2382.4089
XLM $0.2766
AVAX $19.4586
HBAR $0.1842
CRO $0.0799
SUI $2.2827
LTC $91.4533
DOT $4.4662
PI $0.9953
OM $6.3453
BCH $325.0279
BGB $4.7451
WETH $1944.0839
USDE $0.9996
HYPE $16.0222
XMR $214.2623
UNI $6.8059
DAI $1.0011
APT $5.7627
NEAR $2.7818
WBT $28.8051
OKB $52.1084
PEPE $0.0000
GT $22.9130
ICP $5.7782
AAVE $181.0913
ETC $17.8363
TKX $33.2858
MNT $0.7858
ONDO $0.8356
VET $0.0256
TRUMP $10.9794
TAO $250.7356
BTC $84250.5941
ETH $1990.5397
XRP $2.3946
BNB $627.7397
SOL $130.3495
ADA $0.7115
DOGE $0.1688
TRX $0.2343
stETH $1986.1989
WBTC $84183.3742
LINK $14.2086
LEO $9.7716
TON $3.6163
USDS $0.9990
wstETH $2382.4089
XLM $0.2766
AVAX $19.4586
HBAR $0.1842
CRO $0.0799
SUI $2.2827
LTC $91.4533
DOT $4.4662
PI $0.9953
OM $6.3453
BCH $325.0279
BGB $4.7451
WETH $1944.0839
USDE $0.9996
HYPE $16.0222
XMR $214.2623
UNI $6.8059
DAI $1.0011
APT $5.7627
NEAR $2.7818
WBT $28.8051
OKB $52.1084
PEPE $0.0000
GT $22.9130
ICP $5.7782
AAVE $181.0913
ETC $17.8363
TKX $33.2858
MNT $0.7858
ONDO $0.8356
VET $0.0256
TRUMP $10.9794
TAO $250.7356
  • Catalog
  • Blog
  • Tor Relay
  • Jabber
  • One-Time notes
  • Temp Email
  • What is TOR?
  • We are in tor
  • Global scam by Stargazer Goblin: 3,000 fake GitHub accounts spreading malware

    The attacker, Stargazer Goblin, created a network of counterfeit GitHub accounts to distribute various malware. The scheme, which has generated $100,000 in illicit profits over the past year, includes more than 3,000 accounts used to host malicious links and software.

    The fraudulent “Stargazers Ghost Network,” named by Check Point, encompasses thousands of repositories hosting malware such as Atlantida Stealer, Rhadamanthys, RisePro, Lumma Stealer, and RedLine. These accounts are also involved in various activities on the platform to give them the appearance of legitimacy.

    The network's activities were detected in August 2022, but ads for the scheme appeared on the Dark Net only in early July 2023. According to experts, the network not only spreads malware but also performs other tasks to make these fake accounts look like regular users.

    To protect against being taken off the platform, Stargazer Goblin uses different categories of accounts for different aspects of the scheme. Some accounts create phishing repository templates, others host images for these templates, and still others add malware in the form of password-protected archives disguised as cracked software and game cheats.

    As GitHub accounts are detected and blocked, Stargazer Goblin updates links to new active malware releases, ensuring minimal disruption to operations. Some accounts in the network were previously compromised, and their credentials were likely obtained by ransomware.

    The Stargazer Ghost Network shows a high level of organization and adaptability, which allows attackers to minimize losses and quickly recover from GitHub's actions. Using different accounts for different tasks makes their infrastructure resistant to detection and removal from the platform.

    This case highlights the importance of international law enforcement cooperation in the fight against cybercrime and demonstrates how even the most influential dark web markets can be stopped.

    Top 10 Emerging Cybercrime Methods in 2024
    The Evolution of Data Ransom: A New Threat to Corporate Security

    Comments 0

    Add comment