AINewsnow

Warning: A Font File in Your GitHub Repo Might Be Stealing Your Passwords (How I Reverse-Engineered a Global Malware Campaign & Built a Cleaner)

How a university group project led me down a rabbit hole of fake .woff2/.ttf/.eot font files, 150-space config injections, Ethereum smart-contract C2s, and Chrome 127+ encryption bypasses—plus the open-source scanner & AI audit prompt I built to help you check your repos." tags: security, github, j…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-11-12 17:38 · DEV Community — AI
    Warning: A Font File in Your GitHub Repo Might Be Stealing Your Passwords (How I Reverse-Engineered a Global Malware Campaign & Built a Cleaner)

More stories

  1. The phantom life of Alice Huang, alleged Chinese spy who had affair with Nvidia CEO — CSET Georgetown
  2. Introducing Gemini 4 Hydrogen — Google DeepMind Blog
  3. Google's Gemini app now available on Apple CarPlay — Google AI Blog
  4. Anthropic launches Claude Fable 5.2 and Claude for Manufacturing — Anthropic (X)
  5. AWS releases local emulator of 200+ services written entirely by AI agents — AWS Machine Learning Blog
  6. Security firm says Grok-built apps exposed data from thousands of users, including SpaceXSI — Ars Technica AI
  7. OpenAI's quarterly revenue reportedly crosses $10 billion as losses widen — The Information AI
  8. United Airlines bans third-party AI agents from booking flights — Computerworld AI

Get the daily brief of stories like this at 6:30 every morning →