Threat Actors Exploit GitHub Accounts to Host Payloads, Tools, and Amadey Malware Plugins

Cisco Talos researchers identified a sophisticated Malware-as-a-Service (MaaS) operation in April 2025 that employed the Amadey botnet to distribute various payloads. This operation exploited fake GitHub accounts as open directories for hosting malicious payloads, tools, and Amadey plugins, aiming to evade web filtering mechanisms and simplify distribution. By leveraging GitHub’s legitimate domain, threat actors could […]

The post Threat Actors Exploit GitHub Accounts to Host Payloads, Tools, and Amadey Malware Plugins appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.