Onmsft2026-09-20 08:17:24

Fake LastPass GitHub Repositories Push Rapuncel Malware to Windows Users

Rapuncel malware campaign uses fake GitHub repositories to target Windows users by impersonating LastPass and at least 39 other companies through SEO-optimized GitHub pages.

Summary

Researchers from LastPass and Delphos Labs found that the attackers target people searching for popular software, including LastPass Authenticator, and direct them to convincing fake repositories.

malwarenews

This summary is a partial excerpt — the source's own feed cuts off here. Read the full story at Onmsft for the rest.

KazaSec's take

Stories like this are part of why proactive security testing exists — finding the gap before someone else does is always cheaper than responding after the fact.

Coverage details

Source: Onmsft
Published: 2026-09-20 08:17:24
Author: milan stanojevic
Category: toptechnology

We've archived 208 other articles touching the same topic (malware, news) — see the full security news archive.

Worried this kind of story could be about you next?

We help organizations find and fix the gaps before they make headlines.

Request a Security Assessment Browse Services