# Hacker Network 'Ghost' Spreads Malware on GitHub 👻

**URL:** <https://onehack.st/t/hacker-network-ghost-spreads-malware-on-github/287561>\
**Category:** News & Articles\
**Tags:** hacking\
**Created:** [July 24, 2024, 11:31pm UTC](https://onehack.st/t/hacker-network-ghost-spreads-malware-on-github/287561 "2024-07-24T23:31:12Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheJoker](https://onehack.st/user_avatar/onehack.st/thejoker/32/22660_2.png) [@TheJoker](https://onehack.st/u/TheJoker)\
**Post date:** [July 24, 2024, 11:31pm UTC](https://onehack.st/t/hacker-network-ghost-spreads-malware-on-github/287561/1 "2024-07-24T23:31:12Z")

</div>

**Summary:**

1. **Ghost Network Discovery** : Researchers at **Check Point** uncovered a secretive network of **3,000 “ghost” accounts** on GitHub, promoting malicious content. Dubbed **“Stargazer Goblin,”** the cybercriminal behind this has been active since **June 2023**.

2. **Malicious Manipulation** : The network exploits GitHub’s community features, such as **“starring,” “forking,” and “watching”** repositories, to make malicious pages appear legitimate and popular. This tactic enhances the visibility and credibility of harmful repositories.

3. **Targeting Windows Users** : The **Stargazers Ghost Network** targets **Windows users** , spreading ransomware and info-stealer malware disguised as legitimate software tools.

[Read more on Wired](https://www.wired.com)