‘Stargazer Goblin’ Amasses Thousands of Rogue GitHub Accounts to Spread Malware

Stargazer Goblin has been distributing various malware families like Atlantida Stealer, Lumma, and Rhadamanthys, since at least August 2022. The threat actor charges users to “star” repositories with fake accounts, increasing their credibility.