Backdoored Malware Reels in Newbie Cybercriminals

**Executive Summary:** Sophos X-Ops discovered an operation in which an actor tracked as "ischhfd83" created and maintained over a hundred backdoored GitHub repositories (including a backdoored Sakura RAT) that targeted game cheaters and novice threat actors from 2022 through April; researchers linked the activity to multiple related campaigns, identified aliases and domains, and reported the repositories to GitHub for takedown.