indicatorurl
hxxps://github[.]com/reader2025pt-br/READER/blob/main/Reader_PDF_2025.exe
- First seen
- 2026-05-14
- Last seen
- 2026-05-14
- Sightings
- 1
Posts referencing this indicator
- The Growing Abuse of GitHub and GitLab in Phishing Campaigns
Malicious RAT disguised as a PDF reader hosted on GitHub (observed in ATR 397723).