ChocoPoC Malware — Analysis, Campaigns & Threat Activity

Related Threat Clusters

• ChocoPoC Malware Targets Cybersecurity Researchers via Trojanized GitHub Exploits

  A coordinated supply chain attack has been identified, targeting vulnerability researchers and penetration testers through malicious proof-of-concept (PoC) repositories on GitHub. The malware, named ChocoPoC, is a…

  10 articles · Updated July 1, 2026

Recent Intelligence Reports

• Dont Eat The Chocopocs How Vulnerability Researchers Were Repeatedly Targeted By Trojanised Exploits — www.sekoia.com · July 2, 2026
• Trojanized GitHub exploits deliver ChocoPoC malware via malicious Python dependencies — Feeds.4Sysops · July 2, 2026
• ChocoPoC Campaign Abuses GitHub PoC Repositories to Steal Browser Credentials — Gbhackers · July 2, 2026
• ChocoPoc malware delivered via trojanized exploits on GitHub — Bleepingcomputer · July 1, 2026
• New ChocoPoC malware targets researchers via trojanized PoC exploits — Bleepingcomputer · July 1, 2026
• ChocoPoc malware delivered via trojanized exploits on GitHub — Bleepingcomputer · July 1, 2026

Related Entities