Malware
SmartLoader
- First Reported
- Jun 2, 2026
- Latest Reported
- Oct 8, 2026
Reported Context (3)
- More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earlier this month to push the StealC infostealer. FakeGit Campaign Returns with 17,610 Malicious GitHub Repositories
- The attackers are targeting AI users and developers, cloning AI-related resources and developer tools and using SmartLoader to deliver the infostealer payload. Fake AI and Developer GitHub Repositories Deliver Multi-Stage Infostealer
- SmartLoader / Oura MCP supply chain campaign Unauthenticated MCP Server Exposed AWS Credentials Through SSRF and File Inclusion
CVE (6)
Malware (4)
Threat Actors (1)
MITRE ATT&CK (8)
Vendors (4)
Products (11)
Tools (9)
Industries (6)
Countries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.