Cybercriminals are using fake GitHub repositories to distribute a new information stealer called #Rapuncel.

#Cybersecurity #Malware #Infostealer #GitHub #EDR #InformationSecurity #ThreatIntelligence #SupplyChainSecurity #CyberThreats

www.bleepingcomputer.com/news/securit...

New 'Rapuncel' infostealer uses fake GitHub repos and a Microsoft-signed kernel driver to disable 145 EDR & AV products. It then steals browser credentials, crypto wallets, and session data. #Rapuncel #Infostealer #Malware #EDR #GitHub

🌐 cyber[.]netsecops[.]io

🚨 Fake #LastPass installer disables defenses

#GitHub lures deliver #Rapuncel, whose signed driver kills 145 AV and EDR processes before stealing credentials.

🔗 read more: thehackernews.com/20...

#ransomNews #cyberthreats #Malware

📢 Rapuncel : un infostealer MaaS exploite GitHub pour cibler 40 entreprises via un driver signé Microsoft

L'investigation a débuté le 13 août 2026 suite à la détection d'une fausse organisation GitHub usurpant l'identité de LastPass…

🟢 vérification factuelle haute
#MaaS #Rapuncel #Cyberveille

Fake LastPass Authenticator installers on GitHub impersonated 40+ orgs to spread Rapuncel, a stealer that uses a kernel driver to disable 145 security tools and steal passwords and wallet data. #LastPass #GitHub #Rapuncel

Signed driver used to kill 145 security tools & steal passwords with Rapuncel malware. #SecurityNews #Malware #Rapuncel #DriverAttack #CredentialStealer #Cybersecurity thedailytechfeed.com/microsoft-si...

A signed 'NVIDIA' driver in a fake LastPass Authenticator install is secretly an AV/EDR killer. https://intel.threadlinqs.com/threat/TL-2026-2602 #ThreatIntel #Rapuncel #BoryptGrab #Alinubx

Gefälschte #GitHub-Repositorys: Neue #Infostealer-Variante | heise online https://www.heise.de/news/LastPass-entdeckt-neue-Infostealer-Variante-die-sich-als-GitHub-Repo-tarnt-11459163.html #Rapuncel #malware #BoryptGrab #Windows :windows: #Microsoft #MicrosoftWindows

Fake #LastPass Authenticator #GitHub repos push new #Rapuncel #infostealer

https://www.bleepingcomputer.com/news/security/fake-lastpass-authenticator-github-repos-push-new-rapuncel-infostealer/

#cybersecurity #malware

SEO-optimized GitHub repos are impersonating LastPass and other vendors to spread the new Rapuncel infostealer, while a Microsoft-signed Alinubx.sys driver can kill 145 AV and EDR tools. #LastPass #Rapuncel #Microsoft