Fake LDAPNightmare Exploit on GitHub Spreads Infostealer Malware

Cybercriminals are spreading infostealer malware disguised as a PoC exploit for the CVE-2024-49113 (aka LDAPNightmare) vulnerability via fake GitHub repositories. The malicious file, “poc.exe,” deploys scripts that collect sensitive system data and exfiltrate it to a remote FTP server. This tactic targets security researchers by exploiting trusted platforms like GitHub. Users should verify sources, review code, and use security tools to avoid these kind of threats.