Researchers report about a new campaign that\u2019s delivering a variety of malware, by exploiting GitHub, FileZilla and potentially other legitimate services. <\/p>\n\n\n\n
Adversaries are impersonating<\/a> 1Password, Bartender 5, Pixelmator Pro, and other software on GitHub and FileZilla to deliver multiple threats in a massive campaign. <\/p>\n\n\n\n The campaign uses multiple stealers, allowing it to target Windows, MacOS, and Android users. Researchers believe that hackers are centrally controlling these families from a shared C2. <\/p>\n\n\n\n The following table shows which malware families affect which systems: <\/p>\n\n\n\n\n\n
\n \n Malware\u00a0 <\/th>\n \n Target system\u00a0 <\/th>\n <\/tr>\n \n \n Vidar<\/a> <\/td>\n \n Windows\u00a0 <\/td>\n <\/tr>\n \n \n Lumma<\/a> <\/td>\n \n Windows\u00a0 <\/td>\n <\/tr>\n \n \n Atomic\u00a0 <\/td>\n \n MacOS\u00a0 <\/td>\n <\/tr>\n \n \n Octo\u00a0 <\/td>\n \n Android\u00a0 <\/td>\n <\/tr>\n <\/table>\n<\/div>