Fake GitHub Repositories Impersonating LastPass Distribute New Rapuncel Information Stealer

An ongoing malware campaign leverages SEO-optimized GitHub repositories to impersonate well-known software vendors and distribute Rapuncel, a previously…

Warn users to download only from verified official GitHub repositories. Deploy malware detection alerts on endpoints and monitor suspicious downloads from GitHub. Check for evidence of Rapuncel in your network and educate teams to verify repository legitimacy before downloading security tools.