CrowdStrike and Google take down botnet used by hackers to target open source software developers

CrowdStrike, working with Google and Shadowserver, took down the Glassworm botnet that was used to distribute malware and steal credentials from open-source software developers, poisoning more than 300 GitHub repositories; the operation disrupted four command-and-control channels that relied on the Solana blockchain, BitTorrent, Google Calendar and virtual private servers, stopping further malware deliveries and access to infected systems.