Fake LastPass Authenticator GitHub Repos Distribute New Rapuncel Infostealer
SEO-optimized repositories impersonate legitimate software to harvest victim data

Key Takeaways
- A new information stealer, Rapuncel, is being distributed via fake GitHub repositories.
- Threat actors are impersonating LastPass Authenticator and other well-known software brands.
- The campaign uses SEO manipulation to surface malicious repositories in search results.
- Users downloading from unofficial sources risk credential theft and data exfiltration.
- No patch is available; mitigation focuses on source verification and endpoint security.
Related Security News

Star Blizzard Campaign Targets 100+ Organizations with Fake Event Invitations
Microsoft reports that the Russian state-sponsored threat actor Star Blizzard has been conducting a sustained campaign since January 2026, using fake event invitations to trick targets into installing a backdoor on Windows computers. The operation has affected more than 100 organizations, primarily in the U.S. and U.K., with victims tied to Ukraine. At least one infection has been confirmed, though the full extent of breaches and data exfiltration remains unverified.




