this post was submitted on 28 Jul 2024
24 points (83.3% liked)

Cybersecurity

5618 readers
144 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !cybersecurity@lemmy.capebreton.social !securitynews@infosec.pub !netsec@links.hackliberty.org !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 1 year ago
MODERATORS
 

It's the top result if you searched in GitHub about removing Microsoft edge, while it's not detected by Windows Security, Eset or Kaspersky (the best av vendors) it's being detected by other av engines, is it a false positive?

you are viewing a single comment's thread
view the rest of the comments
[–] drspod@lemmy.ml 8 points 3 months ago

Number of interactions on GitHub is irrelevant to whether you should trust it.

See: https://www.bleepingcomputer.com/news/security/over-3-000-github-accounts-used-by-malware-distribution-service/

Stargazer Goblin established a system where they create hundreds of repositories using three thousand fake 'ghost' accounts. These accounts star, fork, and subscribe to malicious repositories to increase their apparent legitimacy and make them more likely to appear on GitHub's trending section.