Fake security tools on GitHub push backdoors and infostealers

A threat actor has been publishing backdoored security tools on GitHub, including fake scanners and log-parsing scripts aimed at cybersecurity professionals. Dr. Web reports more than 2,000 Windows systems compromised, with payloads including the AsyncRAT backdoor, clipboard-swapping crypto malware, and an infostealer that targets browser data and Discord tokens.