ExploitMatch
Back

Platform

GitHub

Related CVEs

Recent activity

North Korean Hackers Deploy Mac Backdoors via Fake Job Tests Targeting IT FirmsNorth Korean threat actor Jade Sleet, also known as TraderTraitor, has been linked to a breach of an Indian IT services provider using macOS backdoors named FLATROOF and ROOFDECK. …Malware Spread via Fake Polymarket Trading Bot Targets DeFi DevelopersOn July 1, 2026, security firm SlowMist identified a fake trading bot on GitHub designed to spread malware targeting Polymarket users and DeFi developers. The bot, named 'polymarke…Kimsuky Expands AI Capabilities for CyberattacksThe North Korean hacking group Kimsuky has developed local AI tools to enhance its cyberattack capabilities, as reported by Genians Security Center on August 10, 2026. The group is…NightEagle APT Targets Russian Enterprises with Advanced MalwareThe NightEagle APT group (APT-Q-95) has escalated its cyberattacks against Russian organizations, employing sophisticated techniques for persistence and lateral movement. Utilizing…APT36 Launches Operation RapidRust with New Rust Malware ToolsIn August 2026, the Pakistan-nexus threat actor APT36 initiated Operation RapidRust, targeting government and defense organizations in India and Afghanistan. The campaign introduce…North Korean Hackers Utilize EtherHiding for Cryptocurrency TheftThe Google Threat Intelligence Group (GTIG) reports that North Korean threat actor UNC5342 has adopted a new technique called EtherHiding to deliver malware and facilitate cryptocu…North Korean Actors Exploit GitHub in Multi-Stage Malware Campaign Against South KoreaA sophisticated malware campaign targeting users in South Korea has been identified, utilizing malicious LNK files that leverage GitHub as a command and control (C2) infrastructure…Void Dokkaebi's Malware Campaign Exploits Developer Repositories via Fake Job InterviewsVoid Dokkaebi, a North Korean threat actor, has escalated its malware distribution tactics by using fake job interviews to compromise software developers. This campaign, known as t…Operation Blinder Tunnel Targets Iraqi Critical InfrastructurePalo Alto Networks' Unit 42 has identified a campaign dubbed 'Operation Blinder Tunnel', attributed to an Iranian state-aligned threat actor targeting critical infrastructure in Ir…
All GitHub threat reporting on ThreatCluster