Cybersecurity researchers have exposed a previously unknown threat actor known as Water Curse that relies on weaponized GitHub repositories to deliver multi-stage malware.
« The malware enables data exfiltration (including credentials, browser data, and session tokens), remote access, and long-term persistence on infected systems, » Trend Micro researchers Jovit Samaniego, Aira Marcelo, Mohamed