Fake LDAPNightmware exploit on GitHub spreads infostealer malware

Trend Micro identified a deceptive GitHub repository posing as a PoC for CVE-2024-49113 that instead distributes an info-stealer: a UPX-packed 'poc.exe' drops a PowerShell script which schedules encoded tasks, retrieves additional scripts from Pastebin, harvests system/process/network information and uploads it as a ZIP to an external FTP server using hardcoded credentials; IOCs are provided and users are advised to validate PoC sources and inspect binaries before execution.