Developers can never be too careful as a network of more than 3,000 malicious accounts were discovered on GitHub as a part of a distribution-as-a-service (DaaS) network that aims to appear legitimate on the platform, but ultimately distributes malicious links and malware, including Atlantida Stealer, Rhadamanthys, RisePro, Lumma Stealer, and RedLine. In a July 24 blog post, Check Point Research tracked the threat group behind the DaaS service as Stargazer Goblin, which operates and maintains the Stargazers Ghost Network and links via GitHub accounts that appear legitimate.

Source: SC Magazine