Know What's Happening in AI

Dangerous WebRAT Malware Now Being Spread by GitHub Repositories

Kaspersky discovered fifteen GitHub repositories masquerading as proof‑of‑concept exploits that actually deliver the WebRAT backdoor and infostealer. The fake exploits, some generated with generative AI, bundle a password‑protected ZIP containing a decoy DLL and a malicious dropper named rasmanesc.exe, which disables Windows Defender and installs WebRAT. The campaign, active since September 2025, targets security researchers and other developers who download the packages. GitHub has removed the malicious repositories, but affected users must manually eradicate the malware.