Dangerous WebRAT malware now spread through GitHub repositories

• Kaspersky discovers 15 malicious GitHub repositories masquerading as proof-of-concept exploits, some built with Gen AI
• Victims receive a ZIP with lures and a dropper (rasmanesc.exe) which installs the WebRAT backdoor/infostealer
• GitHub has removed the repositories, but infected users should manually eradicate WebRAT and remain cautious of typosquatted packages.

Cybercriminals are now targeting security researchers (and perhaps other criminals) through fake, malware-laden proof-of-concept exploits hosted on popular repositories, experts have warned.

Cybersecurity researchers Kaspersky said they found 15 malicious repositories hosted on GitHub. These repositories, apparently designed with the help of generative artificial intelligence (Gen AI), claimed to provide an exploit for several vulnerabilities discovered and reported in the media.