Attackers Use Phony GitHub Pages to Deliver Mac Malware

An emerging threat campaign is using targeted SEO poisoning to hit Mac users with infostealers. That's according to LastPass's Threat Intelligence, Mitigation, and Escalation (TIME) team, which on Sept. 18 published a blog post dedicated to an emerging threat campaign involving phony GitHub pages claiming to be from legitimate companies. GitHub Mac AttackLastPass said the campaign has targeted a range of companies across the technology and financial sectors, including LastPass. In that case, researchers discovered two fake listings from GitHub users for repositories offering "LastPass Premium on MacBook." Mitigating the Mac AttackDark Reading asked LastPass why Mac users in particular have been targeted by this campaign and malware.