Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads Emmie Evans December 13, 2025

Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads

Cybersecurity researchers are calling attention to a new campaign that’s leveraging GitHub-hosted Python repositories to distribute a previously undocumented JavaScript-based Remote Access Trojan (RAT) dubbed PyStoreRAT.
“These repositories, often themed as development utilities or OSINT tools, contain only a few lines of code responsible for silently downloading a remote HTA file and executing

Write a comment
Your email address will not be published. Required fields are marked *
Scroll to Top