New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

Attackers are using a data-stealing trojan, known as ChocoPoC, to target vulnerability researchers. The malware is hidden inside fake exploit code in Python proof-of-concept repositories on GitHub, which claim to exploit newly discovered vulnerabilities. When run, the malware steals saved passwords, browser cookies, and files, and also provides the attacker with a shell on the compromised machine. The repositories are designed to appear as legitimate proof-of-concept exploit code, making them a convincing target for researchers. The malware is specifically aimed at those who hunt bugs for a living, posing a significant threat to their systems and data.