GitCaught campaign relies on Github and Filezilla to deliver multiple malware

Recorded Future’s Insikt Group uncovered the "GitCaught" campaign in which Russian-speaking cybercriminals impersonated legitimate macOS applications and used a GitHub profile plus file-sharing/FileZilla infrastructure to distribute multiple malware families (Atomic macOS Stealer, Lumma, Octo, Vidar); the campaign shares C2 infrastructure, abused trusted platforms to evade detection, and Recorded Future identified numerous malicious domains, repositories, additional IPs, and published IOCs and mitigations.