Github's Hilariously Simple Malware Exploit
1,776What if there was a way to inject files into an otherwise completely safe project, well it turns out there was an exploit in the way that Github was handling adding files to it's CDN
==========Support The Channel==========
โบ Patreon: https://brodierobertson.xyz/patreon
โบ Paypal: https://brodierobertson.xyz/paypal
โบ Liberapay: https://brodierobertson.xyz/liberapay
โบ Amazon USA: https://brodierobertson.xyz/amazonusa
==========Resources==========
Bleeping Computer Post: https://www.bleepingcomputer.com/news/security/github-comments-abused-to-push-malware-via-microsoft-repo-urls/
McAfee Post: https://www.mcafee.com/blogs/other-blogs/mcafee-labs/redline-stealer-a-novel-approach/
OpenAnalysis Report: https://research.openanalysis.net/github/lua/2024/03/03/lua-malware.html
=========Video Platforms==========
๐ฅ Odysee: https://brodierobertson.xyz/odysee
๐ฅ Podcast: https://techovertea.xyz/youtube
๐ฎ Gaming: https://brodierobertson.xyz/gaming
==========Social Media==========
๐ค Discord: https://brodierobertson.xyz/discord
๐ฆ Twitter: https://brodierobertson.xyz/twitter
๐ Mastodon: https://brodierobertson.xyz/mastodon
๐ฅ๏ธ GitHub: https://brodierobertson.xyz/github
==========Credits==========
๐จ Channel Art:
Profile Picture:
https://www.instagram.com/supercozman_draws/
#Github #Linux #OpenSource #FOSS #itlab
๐ต Ending music
Track: Debris & Jonth - Game Time [NCS Release]
Music provided by NoCopyrightSounds.
Watch: https://www.youtube.com/watch?v=yDTvvOTie0w
Free Download / Stream: http://ncs.io/GameTime
DISCLOSURE: Wherever possible I use referral links, which means if you click one of the links in this video or description and make a purchase I may receive a small commission or other compensation.