Russia's Sandworm hacking group is using fake CAPTCHA prompts to infect Ukrainian devices with malware across ten-plus ...

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

Kaspersky says the attacks use phishing, GitHub-hosted payloads, CVE-2025-9491 LNK abuse, and Go2Tunnel-based tunneling.