~/article/fake-lastpass-authenticator-github-repos-push-new-rapuncel-infostealer-15kzcq

info2026-09-18 15:19 UTCSource: BleepingComputer

Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer

An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented information stealer called Rapuncel.

Read at the source

Summary written for cymesh.dev. The full article lives at BleepingComputer.

Topics

malware

~/cymesh.net

Certificates expire quietly

cymesh.net watches your TLS and SSL certificates and warns you before one lapses.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Talk to us See cymesh.net

~/related/fake-lastpass-authenticator-github-repos-push-new-rapuncel-infostealer-15kzcq

2026-10-01 05:32 UTC[info]

ScreenConnect Client (Ab)used by Attackers, (Thu, Oct 1st)

SANS Internet Storm Centermalware

2026-10-01 05:30 UTC[low]

Many expect AI in the SOC to make entry jobs harder to get

Help Net Securityphishing ai malware

2026-09-30 22:35 UTC[info]

US sanctions 10 over ATM malware scheme tied to Tren de Aragua

The Recordmalware

2026-09-30 21:25 UTC[info]

Malicious Custom GPTs Turn ChatGPT Into RAT Delivery Lure

Dark Readingai malware

2026-09-30 20:34 UTC[info]

Russian state hackers use new RedFlick technique to push malware

BleepingComputermalware

2026-09-30 15:02 UTC[low]

Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net

Dark Readingphishing malware apt