Malicious Fork of Triton App Discovered on GitHub Distributing Malware

Malicious Fork of Triton App Discovered on GitHub Distributing Malware

First seen 17 Feb 2026, 20:11 UTC •GbhackersCybersecuritynewsCyberpress •32.6

Article Content

Browse articles
ThreatCluster

A malicious fork of the legitimate Triton macOS application has been identified on GitHub, created by the account 'JaoAureliano.' This fraudulent repository misleads users into downloading a trojanized ZIP file named Software_3.1.zip, exploiting GitHub's forking model and misleading content to distribute Windows malware.

How this analysis works

Timeline

2026-02-17
Malicious fork of Triton app discovered on GitHub
2026-02-17
Fraudulent repository created under account 'JaoAureliano'
2026-02-17
Users misled into downloading trojanized archive

Extracted Entities

1 / 2