Tim Shmykov personal blog

Github scam investigation: Thousands of “mods” and “cracks” stealing data

by tim timsh.org published 2025-02-2716 min read

While looking through the articles on a "social engineering" themed forum I discovered a relatively new scam scheme that shocked me. People create thousands of GitHub repositories with all sorts of things - from Roblox and Fortnite mods to "cracked" FL Studio and Photoshop. As soon as you download and

Points

388

HN comments

160

Submissions

1

Cited by

0 commenters

Security & PrivacyWeb & Frontend2025

Related posts from the same era

Claude Code is steganographically marking requests

Thereallo20262,445 points750 commentscited by 3 details

Motorola announces a partnership with GrapheneOS

Motorola News20262,358 points884 commentscited by 10 details

Reverse engineering Ticketmaster's rotating barcodes

conduition20242,305 points714 comments details

The newest Instagram “exploit” is the goofiest I've seen

SSid20262,210 points491 commentscited by 3 details

Bypassing airport security via SQL injection

Ian Carroll20242,004 points440 comments details

Anyone can access deleted and private repository data on GitHub

Truffle Security Blog20241,983 points374 commentscited by 8 details