BoryptGrab Stealer Malware Campaign Targets Windows Users via Fake GitHub Repositories

BoryptGrab Stealer Malware Campaign Targets Windows Users via Fake GitHub Repositories

First seen 6 Mar 2026, 22:13 UTC •Feeds.TrendmicroBroadcomScworldFeeds.FeedburnerSecurityaffairs.Co+5 •67.8

Article Content

Browse articles
ThreatCluster

Trend Micro has reported a new malware campaign involving BoryptGrab, a stealer that targets Windows users through deceptive GitHub pages. This malware collects sensitive data, including browser and cryptocurrency wallet information, and can deliver multiple payloads such as a reverse SSH backdoor.

How this analysis works

Timeline

2026-03-05
Trend Micro reports on BoryptGrab malware campaign
2026-03-06
Broadcom publishes article on BoryptGrab threat

Extracted Entities

1 / 2