PyStoreRAT Malware Targets Developers via GitHub Accounts

PyStoreRAT Malware Targets Developers via GitHub Accounts

First seen 18 Dec 2025, 20:55 UTC •ScworldBroadcom •44.6

Article Content

Browse articles
ThreatCluster

A new supply chain attack has emerged, utilizing dormant GitHub accounts to spread PyStoreRAT, a previously undocumented malware. This sophisticated attack primarily targets developers by distributing counterfeit developer tools. The incident highlights vulnerabilities in software supply chains and the potential for significant impact on development environments.

How this analysis works

Extracted Entities

1 / 2