this post was submitted on 28 Jul 2024
24 points (83.3% liked)

Cybersecurity

5570 readers
173 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected] [email protected] [email protected]

Notable mention to [email protected]

founded 1 year ago
MODERATORS
24
submitted 2 months ago* (last edited 2 months ago) by [email protected] to c/[email protected]
 

It's the top result if you searched in GitHub about removing Microsoft edge, while it's not detected by Windows Security, Eset or Kaspersky (the best av vendors) it's being detected by other av engines, is it a false positive?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 8 points 2 months ago

Number of interactions on GitHub is irrelevant to whether you should trust it.

See: https://www.bleepingcomputer.com/news/security/over-3-000-github-accounts-used-by-malware-distribution-service/

Stargazer Goblin established a system where they create hundreds of repositories using three thousand fake 'ghost' accounts. These accounts star, fork, and subscribe to malicious repositories to increase their apparent legitimacy and make them more likely to appear on GitHub's trending section.