Loading threat actor…
FakeGit is a large-scale malware distribution operation centered on thousands of fraudulent GitHub repositories designed to impersonate legitimate software projects and developers. The campaign has prominently abused interest in AI-agent tooling and Model Context Protocol (MCP) ecosystems by publishing repositories masquerading as agent skills, MCP servers, and utilities for widely used enterprise and consumer services. Operators have used cloned or fabricated projects, copied descriptions, convincing README content, and manipulated repository popularity signals such as stars and forks to increase trust and drive downloads. Victims are lured into downloading archive files presented as installers or releases. The infection chain uses a Lua-based payload to launch SmartLoader, which establishes persistence through scheduled tasks, retrieves command-and-control information via a Polygon smart contract, and downloads additional encrypted components from GitHub. The final payload observed in this campaign is the StealC infostealer. Researchers have assessed FakeGit as likely a continuation of an earlier malware distribution campaign associated with Lumma stealer activity and linked to Water Kurita. A notable aspect of FakeGit is its exploitation of AI-assisted discovery workflows, sometimes described as AgentBaiting. Malicious repositories were surfaced through AI assistants and public MCP or skill directories, increasing the likelihood that both human users and autonomous coding agents would encounter and trust the lures. This makes FakeGit notable not only for large-scale malware delivery and social engineering, but also for adapting software supply-chain style deception to AI-agent ecosystems.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
14 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
1 malware family attributed to this actor across reporting.
10 indicators attributed to this actor: domains, IPs, hashes, and other artifacts pulled from reporting. View more in app.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.