Skip to content
Malicious Fork of Triton App Discovered on GitHub Distributing Malware

Malicious Fork of Triton App Discovered on GitHub Distributing Malware

First seen 17 Feb 2026, 20:11 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 16:10 UTC

A malicious fork of the legitimate Triton macOS application has been identified on GitHub, created by the account 'JaoAureliano.' This fraudulent repository misleads users into downloading a trojanized ZIP file named Software_3.1.zip, exploiting GitHub's forking model and misleading content to distribute Windows malware.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 213d ago How this analysis works

Timeline

2026-02-17
Malicious fork of Triton app discovered on GitHub
2026-02-17
Fraudulent repository created under account 'JaoAureliano'
2026-02-17
Users misled into downloading trojanized archive

More articles in this cluster (3)