New BoryptGrab Stealer Targets Windows Users via Deceptive GitHub Pages

The BoryptGrab campaign leverages fake, SEO-optimized GitHub repositories and deceptive download pages to trick Windows users into installing a sophisticated data-stealing malware that can deliver multiple payloads—including a reverse SSH backdoor—highlighting the growing abuse of trusted developer platforms for large-scale, evolving cyberattacks.