SECURITYQUIET
28 days ago · Global
Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer
SIGNALSMONITORSECURITY
What's happening
SignalsMonitor is following this as a security story. BleepingComputer is the outlet attached so far. The reports are tied to Global. The first report grouped here was at 18 Sept 2026, 15:19 UTC. The headline in use is “Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer”. This note is SignalsMonitor's own briefing, not the publisher's article.
What we know
An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented information stealer called Rapuncel. [...
BleepingComputerRead at BleepingComputer
Story timeline
Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.
- First reported by BleepingComputer
Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer
Reported by 1 outlet
- BleepingComputer