Hackers Use GitHub Repositories to Host Amadey Malware and Data Stealers, Bypassing Filters

Cybercriminals are exploiting public GitHub repositories by creating fake accounts to host malicious payloads, tools, and Amadey malware plug-ins, aiming to evade web filtering and facilitate distribution. This tactic is part of a broader malware-as-a-service (MaaS) campaign observed in April 2025, highlighting the use of legitimate platform features to enhance the stealth and accessibility of malicious operations.