{"id":38464,"date":"2026-07-17T21:45:00","date_gmt":"2026-07-17T19:45:00","guid":{"rendered":"https:\/\/www.chinasmartbuy.com\/blog\/?p=38464"},"modified":"2026-07-17T17:30:18","modified_gmt":"2026-07-17T15:30:18","slug":"github-repository-clone-trojan-boryptgrab","status":"publish","type":"post","link":"https:\/\/www.chinasmartbuy.com\/blog\/github-repository-clone-trojan-boryptgrab\/","title":{"rendered":"GitHub, scoperti 292 repository clone usati per diffondere il trojan BoryptGrab"},"content":{"rendered":"\n<link href=\"https:\/\/fonts.googleapis.com\/css2?family=Bebas+Neue&amp;family=DM+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;1,400&amp;display=swap\" rel=\"stylesheet\">\n<style>\n  :root {\n    --red: #CC1B1B;\n    --red-light: rgba(204,27,27,0.08);\n    --red-mid: #e84040;\n    --accent-soft-bg: rgba(204,27,27,0.07);\n    --accent-soft-border: rgba(204,27,27,0.18);\n    --text: #1a1a1a;\n    --text-muted: #666;\n    --card: #ffffff;\n    --border: #ebebeb;\n    --page-bg: #ffffff;\n    --surface-soft: #fafafa;\n    --surface-contrast: #f0f0f0;\n    --line-soft: #f5f5f5;\n    --soft-label: #bbb;\n    --muted-label: #999;\n    --copy: #333;\n    --font-head: 'Bebas Neue', sans-serif;\n    --font-body: 'DM Sans', sans-serif;\n    --heading-spacing: 0.04em;\n    --heading-weight: 400;\n    --spec-header-spacing: 0.08em;\n    --quickfacts-shadow: 0 10px 24px rgba(15,23,42,0.06);\n  }\n  .fbp5-wrap,.fbp5-wrap * { box-sizing:border-box; margin:0; padding:0; }\n  .fbp5-wrap { font-family:var(--font-body); color:var(--text); line-height:1.7; max-width:860px; margin:0 auto; padding:0 24px 80px; display:flex; flex-direction:column; gap:52px; }\n  .fbp5-wrap[data-rh-site-profile=\"klav\"] { padding:24px 24px 80px; background:var(--page-bg); border-radius:24px; }\n  .fbp5-intro { padding-top:36px; border-top:3px solid var(--red); }\n  .fbp5-intro p { font-size:17px; color:var(--copy); line-height:1.85; margin-bottom:18px; }\n  .fbp5-intro strong { color:var(--text); font-weight:700; }\n  .rh-phonebox { background:var(--card); border:2.5px solid var(--red); border-radius:16px; overflow:hidden; margin:4px 0 0; }\n  .rh-phonebox-topbar,.rh-phonebox-bottombar { height:4px; background:linear-gradient(90deg,var(--red),var(--red-mid),var(--red)); }\n  .rh-phonebox-header { padding:24px 28px; background:var(--surface-soft); border-bottom:1px solid var(--border); display:flex; align-items:flex-start; gap:24px; }\n  .rh-phonebox-hero { width:200px; height:267px; flex-shrink:0; overflow:hidden; border-radius:12px; background:var(--surface-contrast); display:flex; align-items:center; justify-content:center; }\n  .rh-phonebox-hero img { width:100%; height:100%; object-fit:cover; display:block; }\n  .rh-phonebox-header-main { flex:1; display:flex; flex-direction:column; gap:12px; min-width:0; }\n  .rh-phonebox-tag { display:inline-flex; align-items:center; gap:8px; width:fit-content; font-size:11px; font-weight:700; letter-spacing:0.1em; text-transform:uppercase; color:var(--red); background:var(--accent-soft-bg); border:1px solid var(--accent-soft-border); border-radius:100px; padding:4px 12px; }\n  .rh-phonebox-tag-icon, .rh-phonebox-hl-icon, .rh-phonebox-section-icon { font-family:\"Apple Color Emoji\",\"Segoe UI Emoji\",\"Noto Color Emoji\",\"Segoe UI Symbol\",sans-serif; }\n  .rh-phonebox-tag-icon { font-size:12px; line-height:1; }\n  .rh-phonebox-title { font-family:var(--font-head); font-size:clamp(24px,3.5vw,38px); line-height:1; color:var(--text); letter-spacing:0.02em; margin:0; }\n  .rh-phonebox-title span { color:var(--red); }\n  .rh-phonebox-title em { font-style:normal; font-size:0.6em; color:var(--soft-label); font-family:var(--font-body); font-weight:300; letter-spacing:0.01em; }\n  .rh-phonebox-sub { font-size:14px; color:var(--muted-label); font-weight:300; margin:0; }\n  .rh-phonebox-highlights { display:grid; grid-template-columns:repeat(4,minmax(0,1fr)); gap:10px; }\n  .rh-phonebox-hl { background:#fff; border:1.5px solid var(--border); border-radius:10px; padding:12px 14px; display:flex; flex-direction:column; gap:6px; }\n  .rh-phonebox-hl-top { display:flex; align-items:flex-start; gap:8px; }\n  .rh-phonebox-hl-icon { font-size:15px; line-height:1; }\n  .rh-phonebox-hl-value { font-family:var(--font-head); font-size:22px; line-height:1; color:var(--text); letter-spacing:0.02em; }\n  .rh-phonebox-hl-value span { font-family:var(--font-body); font-size:12px; font-weight:600; color:var(--red); }\n  .rh-phonebox-hl-label { font-size:11px; line-height:1.3; color:var(--soft-label); }\n  .rh-phonebox-colors { padding:12px 28px; background:var(--surface-soft); border-bottom:1px solid var(--border); display:flex; align-items:center; gap:8px; flex-wrap:wrap; }\n  .rh-phonebox-colors-label { font-size:11px; font-weight:700; letter-spacing:0.08em; text-transform:uppercase; color:var(--soft-label); }\n  .rh-phonebox-color-chip { display:inline-flex; align-items:center; gap:6px; background:#fff; border:1.5px solid var(--border); border-radius:100px; padding:4px 12px 4px 6px; font-size:13px; color:var(--text); }\n  .rh-phonebox-color-dot { width:12px; height:12px; border-radius:50%; border:1px solid rgba(0,0,0,0.1); display:inline-block; flex-shrink:0; }\n  .rh-phonebox-section { border-bottom:1px solid var(--line-soft); display:grid; grid-template-columns:180px minmax(0,1fr); }\n  .rh-phonebox-section:last-of-type { border-bottom:none; }\n  .rh-phonebox-section-label { padding:18px 20px 18px 28px; background:var(--surface-soft); border-right:1px solid var(--border); display:flex; align-items:flex-start; gap:8px; }\n  .rh-phonebox-section-icon { font-size:16px; line-height:1; flex-shrink:0; margin-top:1px; }\n  .rh-phonebox-section-name { font-size:12px; font-weight:700; letter-spacing:0.05em; text-transform:uppercase; color:var(--muted-label); line-height:1.4; }\n  .rh-phonebox-section-values { padding:18px 28px 18px 22px; }\n  .rh-phonebox-row { margin-bottom:12px; }\n  .rh-phonebox-row:last-child { margin-bottom:0; }\n  .rh-phonebox-row-key { font-size:12px; font-weight:700; letter-spacing:0.06em; text-transform:uppercase; color:var(--red); display:block; margin-bottom:3px; }\n  .rh-phonebox-row-val { font-size:15px; line-height:1.6; color:var(--copy); }\n  .rh-phonebox-row-val strong { font-weight:600; color:var(--text); }\n  .rh-affbox { margin-top:-20px; }\n  .rh-affbox-wrap { width:100%; background:#fff; border:2px solid var(--border); border-radius:16px; overflow:hidden; }\n  .rh-affbox-grid { display:grid; grid-template-columns:repeat(auto-fit,minmax(260px,1fr)); }\n  .rh-affbox-col { padding:22px 24px; }\n  .rh-affbox-col:not(:last-child) { border-right:1px solid var(--line-soft); }\n  .rh-affbox-model { font-family:var(--font-head); font-size:22px; color:var(--text); letter-spacing:0.02em; margin-bottom:4px; line-height:1; }\n  .rh-affbox-model span { color:var(--red); }\n  .rh-affbox-from { font-size:11px; font-weight:700; letter-spacing:0.08em; text-transform:uppercase; color:var(--soft-label); margin-bottom:2px; }\n  .rh-affbox-amount { font-family:var(--font-head); font-size:36px; color:var(--red); letter-spacing:0.02em; line-height:1; margin-bottom:14px; }\n  .rh-affbox-ctas { display:flex; flex-direction:column; gap:8px; margin-bottom:14px; }\n  .rh-affbox-cta { display:inline-flex; align-items:center; justify-content:center; gap:8px; background:var(--red); color:#fff !important; text-decoration:none !important; border-radius:100px; padding:11px 22px; font-size:14px; font-weight:600; white-space:nowrap; }\n  .rh-affbox-cta.secondary { background:var(--text); }\n  .rh-affbox-cta svg { width:13px; height:13px; flex-shrink:0; }\n  .rh-affbox-coupon { display:flex; align-items:center; justify-content:space-between; gap:12px; border:1px dashed var(--accent-soft-border); background:var(--accent-soft-bg); border-radius:12px; padding:10px 12px; margin:0 0 12px; }\n  .rh-affbox-coupon-label { font-size:11px; font-weight:700; letter-spacing:0.08em; text-transform:uppercase; color:var(--red); }\n  .rh-affbox-coupon-code { font-family:var(--font-head); font-size:22px; line-height:1; color:var(--text); letter-spacing:0.03em; }\n  .rh-affbox-promo { font-size:12px; color:var(--text-muted); line-height:1.5; border-top:1px solid var(--line-soft); padding-top:12px; margin-top:2px; }\n  .rh-affbox-promo strong { color:var(--red); font-weight:600; }\n  .rh-affbox-disclaimer { margin-top:10px; font-size:12px; line-height:1.55; color:var(--text-muted); }\n  .rh-downloadjump { margin:-28px 0 0; display:flex; align-items:center; justify-content:space-between; gap:14px; background:#fff; border:1px solid var(--accent-soft-border); border-radius:16px; padding:13px 15px; box-shadow:var(--quickfacts-shadow); }\n  .rh-downloadjump strong { display:block; font-size:12px; font-weight:900; letter-spacing:0.08em; text-transform:uppercase; color:var(--red); line-height:1.2; }\n  .rh-downloadjump span { display:block; margin-top:3px; font-size:13px; color:var(--text-muted); line-height:1.35; }\n  .rh-downloadjump a { display:inline-flex; align-items:center; justify-content:center; flex-shrink:0; background:var(--red); color:#fff !important; text-decoration:none !important; border-radius:999px; padding:9px 14px; font-size:13px; font-weight:800; }\n  .rh-downloadbox { margin:4px 0 0; }\n  .rh-downloadbox-wrap { background:linear-gradient(135deg,var(--accent-soft-bg),#fff); border:1px solid var(--accent-soft-border); border-radius:18px; padding:20px; box-shadow:var(--quickfacts-shadow); }\n  .rh-downloadbox-head { display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:14px; }\n  .rh-downloadbox-kicker { font-size:11px; font-weight:800; letter-spacing:0.12em; text-transform:uppercase; color:var(--red); margin-bottom:6px; }\n  .rh-downloadbox-title { font-family:var(--font-head); font-size:clamp(24px,3.4vw,34px); line-height:1; color:var(--text); letter-spacing:var(--heading-spacing); margin:0; }\n  .rh-downloadbox-count { flex-shrink:0; border:1px solid var(--accent-soft-border); background:#fff; color:var(--red); border-radius:999px; padding:6px 10px; font-size:11px; font-weight:800; text-transform:uppercase; }\n  .rh-downloadbox-links { display:flex; flex-wrap:wrap; gap:10px; }\n  .rh-downloadbox-link { display:inline-flex; align-items:center; justify-content:center; gap:8px; background:var(--red); color:#fff !important; text-decoration:none !important; border-radius:999px; padding:11px 16px; font-size:14px; font-weight:700; }\n  .rh-downloadbox-link svg { width:13px; height:13px; flex-shrink:0; }\n  .rh-downloadbox-note { margin:14px 0 0; font-size:12px; line-height:1.55; color:var(--text-muted); }\n  .rh-offerbox { margin:4px 0 0; }\n  .rh-offerbox-wrap { background:linear-gradient(135deg,var(--accent-soft-bg),#fff); border:1px solid var(--accent-soft-border); border-radius:18px; padding:20px; box-shadow:var(--quickfacts-shadow); }\n  .rh-offerbox-head { display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:14px; }\n  .rh-offerbox-kicker { font-size:11px; font-weight:800; letter-spacing:0.12em; text-transform:uppercase; color:var(--red); margin-bottom:6px; }\n  .rh-offerbox-title { font-family:var(--font-head); font-size:clamp(24px,3.4vw,34px); line-height:1; color:var(--text); letter-spacing:var(--heading-spacing); margin:0; }\n  .rh-offerbox-count { flex-shrink:0; border:1px solid var(--accent-soft-border); background:#fff; color:var(--red); border-radius:999px; padding:6px 10px; font-size:11px; font-weight:800; text-transform:uppercase; }\n  .rh-offerbox-links { display:grid; grid-template-columns:repeat(auto-fit,minmax(220px,1fr)); gap:10px; }\n  .rh-offerbox-link { display:flex; align-items:center; justify-content:center; gap:8px; background:var(--red); color:#fff !important; text-decoration:none !important; border-radius:999px; padding:11px 16px; font-size:14px; font-weight:800; text-align:center; }\n  .rh-offerbox-link small { opacity:.82; font-size:11px; font-weight:700; }\n  .rh-offerbox-link svg { width:13px; height:13px; flex-shrink:0; }\n  .rh-offerbox-note { margin:14px 0 0; font-size:12px; line-height:1.55; color:var(--text-muted); }\n  .rh-offer-inline { margin:0; }\n  .rh-offer-inline-wrap { display:flex; align-items:center; justify-content:space-between; gap:16px; background:var(--surface-soft); border:1px solid var(--accent-soft-border); border-left:4px solid var(--red); border-radius:16px; padding:16px 18px; box-shadow:var(--quickfacts-shadow); }\n  .rh-offer-inline-kicker { font-size:10px; font-weight:800; letter-spacing:0.12em; text-transform:uppercase; color:var(--red); margin-bottom:4px; }\n  .rh-offer-inline-title { font-size:15px; line-height:1.35; color:var(--text); font-weight:800; }\n  .rh-offer-inline-store { margin-top:3px; font-size:12px; color:var(--text-muted); font-weight:700; }\n  .rh-offer-inline-cta { display:inline-flex; align-items:center; justify-content:center; gap:8px; flex-shrink:0; background:var(--red); color:#fff !important; text-decoration:none !important; border-radius:999px; padding:11px 16px; font-size:13px; font-weight:800; white-space:nowrap; }\n  .rh-offer-inline-cta svg { width:13px; height:13px; flex-shrink:0; }\n  .rh-offer-inline-note { margin:9px 0 0; font-size:12px; line-height:1.55; color:var(--text-muted); }\n  .rh-external-embed { margin:4px 0 0; }\n  .rh-external-embed-wrap { width:100%; background:#fff; border:1px solid var(--border); border-radius:16px; overflow:hidden; box-shadow:var(--quickfacts-shadow); }\n  .rh-external-embed-head { display:flex; align-items:center; justify-content:space-between; gap:12px; padding:14px 18px; background:var(--surface-soft); border-bottom:1px solid var(--border); }\n  .rh-external-embed-kicker { font-size:11px; font-weight:700; letter-spacing:0.08em; text-transform:uppercase; color:var(--red); }\n  .rh-external-embed-source { font-size:12px; color:var(--soft-label); }\n  .rh-external-embed-frame { position:relative; aspect-ratio:16 \/ 9; overflow:hidden; background:#000; min-height:0; }\n  .rh-external-embed-frame iframe, .rh-external-embed-frame > iframe { position:absolute !important; inset:0; width:100% !important; height:100% !important; min-height:0 !important; max-height:none !important; max-width:none !important; border:0; display:block; }\n  .rh-external-embed-body { padding:18px 20px; display:grid; gap:12px; }\n  .rh-external-embed-title { font-family:var(--font-head); font-size:24px; line-height:1; color:var(--text); letter-spacing:0.02em; }\n  .rh-external-embed-copy { font-size:14px; color:var(--text-muted); line-height:1.6; }\n  .rh-external-embed-link { display:inline-flex; align-items:center; gap:8px; width:fit-content; color:var(--red) !important; text-decoration:none !important; font-weight:700; }\n  .rh-external-embed-link svg { width:13px; height:13px; flex-shrink:0; }\n  .fbp5-section { display:flex; flex-direction:column; gap:0; }\n  .fbp5-section-label { display:inline-flex; align-items:center; gap:7px; font-size:11px; font-weight:700; letter-spacing:0.14em; text-transform:uppercase; color:var(--red); margin-bottom:10px; }\n  .fbp5-section-label::before { content:''; display:block; width:18px; height:2px; background:var(--red); }\n  .fbp5-section h2 { font-family:var(--font-head); font-size:clamp(27px,4vw,39px); letter-spacing:var(--heading-spacing); font-weight:var(--heading-weight); color:var(--text); line-height:1.05; margin-bottom:20px; }\n  .fbp5-section h2 span { color:var(--red); }\n  .fbp5-section p { font-size:17px; color:var(--copy); line-height:1.78; margin-bottom:14px; }\n  .fbp5-bullet-list { margin:18px 0 6px 20px; padding:0; display:flex; flex-direction:column; gap:10px; }\n  .fbp5-bullet-list li { font-size:16px; line-height:1.7; color:#1f2937; }\n  .fbp5-bullet-list li::marker { color:var(--red); }\n  .rh-quickfacts-grid { margin:18px 0 0; display:grid; grid-template-columns:repeat(auto-fit,minmax(220px,1fr)); gap:12px; }\n  .rh-quickfacts-card { background:#fff; border:1px solid var(--border); border-radius:16px; padding:14px 16px; box-shadow:var(--quickfacts-shadow); display:flex; flex-direction:column; gap:6px; }\n  .rh-quickfacts-label { font-size:12px; font-weight:800; letter-spacing:0.08em; text-transform:uppercase; color:var(--red); }\n  .rh-quickfacts-value { font-size:15px; line-height:1.6; color:#1f2937; }\n  .fbp5-highlight { background:var(--red-light); border-left:4px solid var(--red); border-radius:0 10px 10px 0; padding:15px 19px; margin:18px 0 0; font-size:16px; color:var(--copy); line-height:1.65; }\n  .fbp5-info { background:var(--surface-soft); border:1px solid var(--border); border-radius:10px; padding:15px 19px; margin:18px 0 0; font-size:15px; color:var(--text-muted); line-height:1.65; }\n  .fbp5-scheda { background:var(--card); border:1px solid var(--border); border-radius:14px; overflow:hidden; margin:20px 0 0; }\n  .fbp5-scheda-header { background:var(--red); color:#fff; padding:14px 20px; font-family:var(--font-head); font-size:20px; font-weight:var(--heading-weight); letter-spacing:var(--spec-header-spacing); }\n  .fbp5-scheda-row { display:flex; border-bottom:1px solid var(--border); }\n  .fbp5-scheda-row:last-child { border-bottom:none; }\n  .fbp5-scheda-key { width:42%; padding:11px 16px; font-size:13px; font-weight:700; color:var(--text-muted); text-transform:uppercase; letter-spacing:0.06em; background:var(--surface-soft); flex-shrink:0; }\n  .fbp5-scheda-val { padding:11px 16px; font-size:14px; color:var(--text); font-weight:500; line-height:1.5; }\n  @media(max-width:600px) {\n    .fbp5-wrap { padding:0 14px 60px; gap:40px; }\n    .fbp5-section h2 { font-size:32px; }\n    .fbp5-scheda-row { flex-direction:column; }\n    .fbp5-scheda-key { width:100%; }\n    .rh-phonebox-header { padding:18px 16px; flex-direction:column; align-items:center; }\n    .rh-phonebox-hero { width:150px; height:200px; }\n    .rh-phonebox-highlights { grid-template-columns:repeat(2,minmax(0,1fr)); }\n    .rh-phonebox-colors { padding:16px; }\n    .rh-phonebox-section { grid-template-columns:1fr; }\n    .rh-phonebox-section-label { padding:14px 20px; border-right:none; border-bottom:1px solid var(--border); }\n    .rh-phonebox-section-values { padding:14px 20px; }\n    .rh-affbox-grid { grid-template-columns:1fr; }\n    .rh-affbox-col:not(:last-child) { border-right:none; border-bottom:1px solid var(--line-soft); }\n    .rh-affbox-cta { width:100%; }\n    .rh-downloadjump { align-items:flex-start; flex-direction:column; margin:-22px 0 0; }\n    .rh-downloadjump a { width:100%; }\n    .rh-downloadbox-head { flex-direction:column; }\n    .rh-downloadbox-link { width:100%; }\n    .rh-offerbox-head { flex-direction:column; }\n    .rh-offerbox-links { grid-template-columns:1fr; }\n    .rh-offer-inline-wrap { flex-direction:column; align-items:flex-start; }\n    .rh-offer-inline-cta { width:100%; }\n  }\n\n  \/* RH_FBP5_CARDS_CSS_V1 *\/\n  .fbp5-related-grid { display:grid; grid-template-columns:repeat(3,1fr); gap:14px; }\n  .fbp5-telegram-grid { grid-template-columns:repeat(2,1fr); }\n  .fbp5-related-card { display:block; overflow:hidden; border:1px solid var(--border,#ebebeb); border-radius:8px; background:var(--card,#fff); color:inherit !important; text-decoration:none !important; transition:transform .18s ease, box-shadow .18s ease, border-color .18s ease; }\n  .fbp5-related-card:hover { transform:translateY(-2px); border-color:rgba(204,27,27,.35); box-shadow:0 16px 36px rgba(18,18,18,.10); }\n  .fbp5-related-card img { display:block; width:100%; aspect-ratio:16\/9; object-fit:cover; background:var(--surface-soft,#fafafa); }\n  .fbp5-related-thumb-placeholder { width:100%; aspect-ratio:16\/9; display:flex; align-items:center; justify-content:center; background:linear-gradient(135deg,rgba(204,27,27,.10),rgba(204,27,27,.03)); color:var(--red,#CC1B1B); font-family:var(--font-head,'Bebas Neue',sans-serif); font-size:28px; letter-spacing:.04em; }\n  .fbp5-related-body { padding:12px; }\n  .fbp5-related-body span { display:block; margin:0 0 6px; color:var(--red,#CC1B1B); font-size:11px; font-weight:900; letter-spacing:.08em; text-transform:uppercase; }\n  .fbp5-related-body strong { display:block; font-size:15px; line-height:1.25; color:var(--text,#1a1a1a); }\n  .fbp5-related-body small { display:block; margin:7px 0 0; color:var(--text-muted,#666); font-size:13px; line-height:1.35; }\n  @media(max-width:720px) {\n    .fbp5-telegram-grid { grid-template-columns:1fr; }\n    .fbp5-related-grid:not(.fbp5-telegram-grid) { grid-template-columns:1fr; }\n    .fbp5-related-grid:not(.fbp5-telegram-grid) .fbp5-related-card { display:grid; grid-template-columns:112px minmax(0,1fr); align-items:stretch; }\n    .fbp5-related-grid:not(.fbp5-telegram-grid) .fbp5-related-card img,\n    .fbp5-related-grid:not(.fbp5-telegram-grid) .fbp5-related-thumb-placeholder { height:100%; min-height:92px; aspect-ratio:auto; }\n  }\n<\/style>\n<div class=\"fbp5-wrap rh-json-article\" id=\"rh-article-mrp3gp0x-0yzpo\" data-rh-article-type=\"news\" data-rh-site-profile=\"china-smart-buy\">\n  <div class=\"fbp5-intro\">\n    \n    <p>Una nuova campagna malevola su GitHub ha usato almeno <strong>292 repository clone<\/strong> per fingersi software noti e brand legati alla sicurezza, con l&#8217;obiettivo di distribuire il trojan BoryptGrab su Windows. L&#8217;operazione \u00e8 stata individuata da Arctic Wolf, che ha rilevato l&#8217;avvio dell&#8217;attivit\u00e0 dal 26 giugno.<\/p><p>Il punto pi\u00f9 critico \u00e8 il metodo: i repository includevano README falsificati con link a pagine di download apparentemente sicure, ma in realt\u00e0 pensate per convincere l&#8217;utente a eseguire file infetti. Una volta avviato, BoryptGrab pu\u00f2 sottrarre credenziali, wallet crypto, account di messaggistica e altri dati sensibili.<\/p>\n  <\/div>\n\n      <section class=\"fbp5-section\">\n        <div class=\"fbp5-section-label\">Minaccia<\/div>\n        <h2>Come funziona la campagna che sfrutta GitHub per <span>diffondere BoryptGrab<\/span><\/h2>\n        <p>L&#8217;attacco punta sulla fiducia che molti utenti ripongono nei repository pubblicati su GitHub. I criminali hanno creato decine e decine di progetti fasulli che imitano software conosciuti, inserendo nei file README collegamenti a presunte pagine di download protette. In realt\u00e0 quei link portano a file di phishing che installano <strong>BoryptGrab<\/strong> sul sistema Windows.<\/p><p>Il meccanismo \u00e8 semplice ma efficace: chi cerca un tool, una utility o un software di sicurezza pu\u00f2 finire su uno di questi repository clone, leggere istruzioni credibili e scaricare un pacchetto malevolo senza accorgersene. \u00c8 un approccio che rende particolarmente pericolosi i link esterni presenti nella documentazione dei repository, soprattutto quando rimandano a download fuori dalla piattaforma.<\/p>\n        <ul class=\"fbp5-bullet-list\"><li>Avvio della campagna rilevato dal <strong>26 giugno<\/strong>.<\/li><li>Individuati almeno <strong>292 repository<\/strong> falsi su GitHub.<\/li><li>I repository imitavano software noti e marchi legati alla sicurezza.<\/li><li>L&#8217;infezione partiva da link malevoli inseriti nei file README.<\/li><li>Il bersaglio principale \u00e8 l&#8217;ambiente Windows.<\/li><\/ul>\n        <div class=\"rh-quickfacts-grid\">\n      <div class=\"rh-quickfacts-card\">\n        <div class=\"rh-quickfacts-label\">Piattaforma sfruttata<\/div>\n        <div class=\"rh-quickfacts-value\">GitHub<\/div>\n      <\/div>\n    \n      <div class=\"rh-quickfacts-card\">\n        <div class=\"rh-quickfacts-label\">Tipologia<\/div>\n        <div class=\"rh-quickfacts-value\">Trojan infostealer<\/div>\n      <\/div>\n    \n      <div class=\"rh-quickfacts-card\">\n        <div class=\"rh-quickfacts-label\">Nome malware<\/div>\n        <div class=\"rh-quickfacts-value\">BoryptGrab<\/div>\n      <\/div>\n    <\/div>\n        <div class=\"fbp5-highlight\">Il vettore d&#8217;attacco non \u00e8 un exploit tecnico complesso, ma un uso mirato dell&#8217;ingegneria sociale dentro repository apparentemente affidabili.<\/div>\n        <div class=\"fbp5-info\">Il rischio aumenta quando il download viene proposto tramite link esterni invece che tramite release ufficiali o repository verificati.<\/div>\n        \n      <div class=\"fbp5-scheda\">\n        <div class=\"fbp5-scheda-header\">Dati chiave della campagna<\/div>\n        \n          <div class=\"fbp5-scheda-row\">\n            <div class=\"fbp5-scheda-key\">Repository individuati<\/div>\n            <div class=\"fbp5-scheda-val\">Almeno 292<\/div>\n          <\/div>\n        \n          <div class=\"fbp5-scheda-row\">\n            <div class=\"fbp5-scheda-key\">Tecnica usata<\/div>\n            <div class=\"fbp5-scheda-val\">Repository clone con README falsificati e pagine di download phishing<\/div>\n          <\/div>\n        \n          <div class=\"fbp5-scheda-row\">\n            <div class=\"fbp5-scheda-key\">Sistema colpito<\/div>\n            <div class=\"fbp5-scheda-val\">Windows<\/div>\n          <\/div>\n        \n      <\/div>\n    \n      <\/section>\n    \n\n      <section class=\"fbp5-section\">\n        <div class=\"fbp5-section-label\">Dati rubati<\/div>\n        <h2>Cosa pu\u00f2 sottrarre il trojan e perch\u00e9 il danno <span>pu\u00f2 essere ampio<\/span><\/h2>\n        <p>Arctic Wolf ha analizzato BoryptGrab e ha rilevato la presenza di <strong>11 moduli di furto dati<\/strong>. Il malware \u00e8 progettato per raccogliere credenziali salvate nei browser, password, cookie e informazioni legate ai wallet di criptovalute, ma non si ferma qui.<\/p><p>Tra i bersagli ci sono anche account e dati associati a Telegram, Discord, Steam e MetaMask. Inoltre il trojan pu\u00f2 elencare i file presenti sul desktop e nella cartella Documenti, catturare schermate del sistema e recuperare le credenziali archiviate nel Windows Credential Manager, inviando poi tutto ai server di comando e controllo predisposti dagli attaccanti.<\/p>\n        <ul class=\"fbp5-bullet-list\"><li>Furto di account, password e cookie salvati nel browser.<\/li><li>Raccolta dati dai <strong>wallet di criptovalute<\/strong>.<\/li><li>Accesso a informazioni legate a Telegram, Discord, Steam e MetaMask.<\/li><li>Elenco dei file presenti su desktop e nella cartella Documenti.<\/li><li>Cattura di schermate del PC.<\/li><li>Estrazione delle credenziali dal Windows Credential Manager.<\/li><\/ul>\n        <div class=\"rh-quickfacts-grid\">\n      <div class=\"rh-quickfacts-card\">\n        <div class=\"rh-quickfacts-label\">Moduli interni<\/div>\n        <div class=\"rh-quickfacts-value\">11<\/div>\n      <\/div>\n    \n      <div class=\"rh-quickfacts-card\">\n        <div class=\"rh-quickfacts-label\">Destinazione dati<\/div>\n        <div class=\"rh-quickfacts-value\">Server C2 degli attaccanti<\/div>\n      <\/div>\n    <\/div>\n        <div class=\"fbp5-highlight\">La combinazione tra furto credenziali, dati crypto e accesso ai token di sessione rende questo malware pericoloso anche dopo il cambio password.<\/div>\n        <div class=\"fbp5-info\">I cookie e le credenziali di sessione possono facilitare accessi non autorizzati anche senza conoscere subito tutte le password dell&#8217;utente.<\/div>\n        \n      <div class=\"fbp5-scheda\">\n        <div class=\"fbp5-scheda-header\">Capacit\u00e0 attribuite a BoryptGrab<\/div>\n        \n          <div class=\"fbp5-scheda-row\">\n            <div class=\"fbp5-scheda-key\">Browser<\/div>\n            <div class=\"fbp5-scheda-val\">Credenziali salvate, password e cookie<\/div>\n          <\/div>\n        \n          <div class=\"fbp5-scheda-row\">\n            <div class=\"fbp5-scheda-key\">Criptovalute<\/div>\n            <div class=\"fbp5-scheda-val\">Dati di wallet digitali<\/div>\n          <\/div>\n        \n          <div class=\"fbp5-scheda-row\">\n            <div class=\"fbp5-scheda-key\">Servizi coinvolti<\/div>\n            <div class=\"fbp5-scheda-val\">Telegram, Discord, Steam, MetaMask<\/div>\n          <\/div>\n        \n          <div class=\"fbp5-scheda-row\">\n            <div class=\"fbp5-scheda-key\">Attivit\u00e0 aggiuntive<\/div>\n            <div class=\"fbp5-scheda-val\">Screenshot, inventario file, furto credenziali di sistema<\/div>\n          <\/div>\n        \n      <\/div>\n    \n      <\/section>\n    \n\n      <section class=\"fbp5-section\">\n        <div class=\"fbp5-section-label\">Stato attuale<\/div>\n        <h2>Molti repository sono stati rimossi, ma la campagna non \u00e8 <span>ancora chiusa<\/span><\/h2>\n        <p>GitHub \u00e8 gi\u00e0 stato contattato per la rimozione dei contenuti malevoli e gran parte dei repository segnalati \u00e8 stata eliminata. Per\u00f2 la campagna non risulta del tutto spenta: al momento restano ancora <strong>decine di repository<\/strong> non chiusi e sono ancora online anche diversi server usati per distribuire i file di phishing.<\/p><p>In pratica la raccomandazione pi\u00f9 utile \u00e8 evitare download avviati da link presenti nei README quando non provengono da fonti chiaramente ufficiali. In questo scenario contano molto la verifica del publisher, il controllo del dominio di download e l&#8217;uso di canali di rilascio gi\u00e0 noti del software cercato.<\/p>\n        <ul class=\"fbp5-bullet-list\"><li>Gran parte dei repository segnalati \u00e8 stata rimossa.<\/li><li>Restano comunque <strong>decine di repository<\/strong> ancora attivi.<\/li><li>Sono online anche server di download usati per il phishing.<\/li><li>Maggiore attenzione ai link esterni presenti nei README.<\/li><\/ul>\n        <div class=\"rh-quickfacts-grid\">\n      <div class=\"rh-quickfacts-card\">\n        <div class=\"rh-quickfacts-label\">Rimozioni<\/div>\n        <div class=\"rh-quickfacts-value\">Parziali<\/div>\n      <\/div>\n    \n      <div class=\"rh-quickfacts-card\">\n        <div class=\"rh-quickfacts-label\">Rischio residuo<\/div>\n        <div class=\"rh-quickfacts-value\">Repository e server phishing ancora online<\/div>\n      <\/div>\n    \n      <div class=\"rh-quickfacts-card\">\n        <div class=\"rh-quickfacts-label\">Segnale da controllare<\/div>\n        <div class=\"rh-quickfacts-value\">Link di download esterni nella documentazione<\/div>\n      <\/div>\n    <\/div>\n        <div class=\"fbp5-highlight\">La notizia importante non \u00e8 solo il numero dei repository creati, ma il fatto che parte dell&#8217;infrastruttura risulta ancora raggiungibile.<\/div>\n        <div class=\"fbp5-info\">Chi scarica strumenti da GitHub dovrebbe privilegiare release ufficiali, repository verificati e link coerenti con il sito del progetto.<\/div>\n        \n      <div class=\"fbp5-scheda\">\n        <div class=\"fbp5-scheda-header\">Situazione operativa<\/div>\n        \n          <div class=\"fbp5-scheda-row\">\n            <div class=\"fbp5-scheda-key\">Stato dei repository<\/div>\n            <div class=\"fbp5-scheda-val\">Molti rimossi, altri ancora accessibili<\/div>\n          <\/div>\n        \n          <div class=\"fbp5-scheda-row\">\n            <div class=\"fbp5-scheda-key\">Stato dell&#8217;infrastruttura phishing<\/div>\n            <div class=\"fbp5-scheda-val\">Ancora online in diversi casi<\/div>\n          <\/div>\n        \n          <div class=\"fbp5-scheda-row\">\n            <div class=\"fbp5-scheda-key\">Misura prudente<\/div>\n            <div class=\"fbp5-scheda-val\">Verificare dominio, autore e canale di download prima dell&#8217;esecuzione<\/div>\n          <\/div>\n        \n      <\/div>\n    \n      <\/section>\n    \n<section class=\"fbp5-section\" data-rh-related-section=\"1\">\n      <div class=\"fbp5-section-label\">Articoli correlati<\/div>\n      <h2>Altre notizie <span>da leggere<\/span><\/h2>\n      <div class=\"fbp5-related-grid\"><a class=\"fbp5-related-card\" href=\"https:\/\/www.chinasmartbuy.com\/blog\/changan-batteria-jinzhongzhao-standard-sicurezza-gb-38031-2025\/\" target=\"_blank\" rel=\"noopener\">\n      <img decoding=\"async\" src=\"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/07\/changan-image-21cb706a-ec54-45bd-8fdf-c315-zb8stfxo04.webp\" alt=\"Changan: la batteria Jinzhongzhao supera il nuovo standard cinese di sicurezza\" loading=\"lazy\">\n      <div class=\"fbp5-related-body\">\n        <span>auto<\/span>\n        <strong>Changan: la batteria Jinzhongzhao supera il nuovo standard cinese di sicurezza<\/strong>\n        <small>Changan ha certificato la batteria Jinzhongzhao con il nuovo standard cinese di sicurezza: focus su assenza di ince&#8230;<\/small>\n      <\/div>\n    <\/a><a class=\"fbp5-related-card\" href=\"https:\/\/www.chinasmartbuy.com\/blog\/chery-piano-sicurezza-rhino-battery-garanzia-vita\/\" target=\"_blank\" rel=\"noopener\">\n      <img decoding=\"async\" src=\"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/07\/chery-il-piano-sicurezza-rhino-battery-image-7f593359-3d88-43f8-9027-7929-s7gorpu89s.jpg\" alt=\"Chery annuncia il piano sicurezza Rhino Battery per i modelli elettrificati\" loading=\"lazy\">\n      <div class=\"fbp5-related-body\">\n        <span>auto<\/span>\n        <strong>Chery annuncia il piano sicurezza Rhino Battery per i modelli elettrificati<\/strong>\n        <small>Chery lancia il piano sicurezza Rhino Battery con conformit\u00e0 al nuovo standard, sostituzione dell\u2019auto in caso di d&#8230;<\/small>\n      <\/div>\n    <\/a><a class=\"fbp5-related-card\" href=\"https:\/\/www.chinasmartbuy.com\/blog\/cisa-anthropic-mythos-audit-sicurezza-software-governativo\/\" target=\"_blank\" rel=\"noopener\">\n      <img decoding=\"async\" src=\"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/07\/cisa-usa-anthropic-mythos-per-audit-di-sicurezza-sul-software-governativ-c9d125a1-f857-4d71-800d.webp\" alt=\"CISA usa Anthropic Mythos per audit di sicurezza sul software governativo\" loading=\"lazy\">\n      <div class=\"fbp5-related-body\">\n        <span>ai<\/span>\n        <strong>CISA usa Anthropic Mythos per audit di sicurezza sul software governativo<\/strong>\n        <small>CISA sta usando Anthropic Mythos per analizzare il software governativo e l\u2019audit avrebbe gi\u00e0 individuato numerose&#8230;<\/small>\n      <\/div>\n    <\/a><\/div>\n    <\/section><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Una campagna su GitHub ha usato quasi 300 repository falsi per diffondere BoryptGrab, un trojan Windows pensato per rubare credenziali, wallet crypto e account.<\/p>\n","protected":false},"author":10,"featured_media":38463,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_yoast_wpseo_focuskw_text_input":"repository clone GitHub BoryptGrab","footnotes":""},"categories":[480],"tags":[],"class_list":["post-38464","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"blocksy_meta":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>GitHub, scoperti 292 repository clone usati per diffondere il trojan BoryptGrab<\/title>\n<meta name=\"description\" content=\"Arctic Wolf ha individuato almeno 292 repository clone su GitHub usati per diffondere BoryptGrab, un trojan Windows che ruba credenziali, cookie e wallet crypto.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.chinasmartbuy.com\/blog\/github-repository-clone-trojan-boryptgrab\/\" \/>\n<meta property=\"og:locale\" content=\"it_IT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GitHub, scoperti 292 repository clone usati per diffondere il trojan BoryptGrab\" \/>\n<meta property=\"og:description\" content=\"Arctic Wolf ha individuato almeno 292 repository clone su GitHub usati per diffondere BoryptGrab, un trojan Windows che ruba credenziali, cookie e wallet crypto.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.chinasmartbuy.com\/blog\/github-repository-clone-trojan-boryptgrab\/\" \/>\n<meta property=\"og:site_name\" content=\"ChinaSmartBuy\" \/>\n<meta property=\"article:publisher\" content=\"http:\/\/facebook.com\/chinasmartbuy\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-17T19:45:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/07\/github-e3cff064-6203-4e9e-9988-6515-zlpp7b6uv0.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1288\" \/>\n\t<meta property=\"og:image:height\" content=\"984\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Pierluigi Vitale\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Scritto da\" \/>\n\t<meta name=\"twitter:data1\" content=\"Pierluigi Vitale\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tempo di lettura stimato\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minuti\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/github-repository-clone-trojan-boryptgrab\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/github-repository-clone-trojan-boryptgrab\\\/\"},\"author\":{\"name\":\"Pierluigi Vitale\",\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/#\\\/schema\\\/person\\\/d1b2f5d465e9c5f5a3e1316ad64b74c4\"},\"headline\":\"GitHub, scoperti 292 repository clone usati per diffondere il trojan BoryptGrab\",\"datePublished\":\"2026-07-17T19:45:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/github-repository-clone-trojan-boryptgrab\\\/\"},\"wordCount\":894,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/github-repository-clone-trojan-boryptgrab\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/github-e3cff064-6203-4e9e-9988-6515-zlpp7b6uv0.png\",\"articleSection\":[\"News\"],\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/github-repository-clone-trojan-boryptgrab\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/github-repository-clone-trojan-boryptgrab\\\/\",\"url\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/github-repository-clone-trojan-boryptgrab\\\/\",\"name\":\"GitHub, scoperti 292 repository clone usati per diffondere il trojan BoryptGrab\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/github-repository-clone-trojan-boryptgrab\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/github-repository-clone-trojan-boryptgrab\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/github-e3cff064-6203-4e9e-9988-6515-zlpp7b6uv0.png\",\"datePublished\":\"2026-07-17T19:45:00+00:00\",\"description\":\"Arctic Wolf ha individuato almeno 292 repository clone su GitHub usati per diffondere BoryptGrab, un trojan Windows che ruba credenziali, cookie e wallet crypto.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/github-repository-clone-trojan-boryptgrab\\\/#breadcrumb\"},\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/github-repository-clone-trojan-boryptgrab\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/github-repository-clone-trojan-boryptgrab\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/github-e3cff064-6203-4e9e-9988-6515-zlpp7b6uv0.png\",\"contentUrl\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/github-e3cff064-6203-4e9e-9988-6515-zlpp7b6uv0.png\",\"width\":1288,\"height\":984,\"caption\":\"GitHub\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/github-repository-clone-trojan-boryptgrab\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"GitHub, scoperti 292 repository clone usati per diffondere il trojan BoryptGrab\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/\",\"name\":\"ChinaSmartBuy\",\"description\":\"NEWS \u00b7 GUIDE \u00b7 OFFERTE\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"it-IT\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/#organization\",\"name\":\"ChinaSmartBuy\",\"url\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/06\\\/logo-chinasmartbuy-e1560864925407.png\",\"contentUrl\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/06\\\/logo-chinasmartbuy-e1560864925407.png\",\"width\":100,\"height\":100,\"caption\":\"ChinaSmartBuy\"},\"image\":{\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"http:\\\/\\\/facebook.com\\\/chinasmartbuy\",\"https:\\\/\\\/t.me\\\/chinasmartbuy\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/#\\\/schema\\\/person\\\/d1b2f5d465e9c5f5a3e1316ad64b74c4\",\"name\":\"Pierluigi Vitale\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8b619e3d152ede2a93b97f3949cc5fc7878d7ba38909c51ec98d3b14dc3bc635?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8b619e3d152ede2a93b97f3949cc5fc7878d7ba38909c51ec98d3b14dc3bc635?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/8b619e3d152ede2a93b97f3949cc5fc7878d7ba38909c51ec98d3b14dc3bc635?s=96&d=mm&r=g\",\"caption\":\"Pierluigi Vitale\"},\"url\":\"https:\\\/\\\/www.chinasmartbuy.com\\\/blog\\\/author\\\/pierluigivitale\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"GitHub, scoperti 292 repository clone usati per diffondere il trojan BoryptGrab","description":"Arctic Wolf ha individuato almeno 292 repository clone su GitHub usati per diffondere BoryptGrab, un trojan Windows che ruba credenziali, cookie e wallet crypto.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.chinasmartbuy.com\/blog\/github-repository-clone-trojan-boryptgrab\/","og_locale":"it_IT","og_type":"article","og_title":"GitHub, scoperti 292 repository clone usati per diffondere il trojan BoryptGrab","og_description":"Arctic Wolf ha individuato almeno 292 repository clone su GitHub usati per diffondere BoryptGrab, un trojan Windows che ruba credenziali, cookie e wallet crypto.","og_url":"https:\/\/www.chinasmartbuy.com\/blog\/github-repository-clone-trojan-boryptgrab\/","og_site_name":"ChinaSmartBuy","article_publisher":"http:\/\/facebook.com\/chinasmartbuy","article_published_time":"2026-07-17T19:45:00+00:00","og_image":[{"width":1288,"height":984,"url":"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/07\/github-e3cff064-6203-4e9e-9988-6515-zlpp7b6uv0.png","type":"image\/png"}],"author":"Pierluigi Vitale","twitter_card":"summary_large_image","twitter_misc":{"Scritto da":"Pierluigi Vitale","Tempo di lettura stimato":"4 minuti"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.chinasmartbuy.com\/blog\/github-repository-clone-trojan-boryptgrab\/#article","isPartOf":{"@id":"https:\/\/www.chinasmartbuy.com\/blog\/github-repository-clone-trojan-boryptgrab\/"},"author":{"name":"Pierluigi Vitale","@id":"https:\/\/www.chinasmartbuy.com\/blog\/#\/schema\/person\/d1b2f5d465e9c5f5a3e1316ad64b74c4"},"headline":"GitHub, scoperti 292 repository clone usati per diffondere il trojan BoryptGrab","datePublished":"2026-07-17T19:45:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.chinasmartbuy.com\/blog\/github-repository-clone-trojan-boryptgrab\/"},"wordCount":894,"commentCount":0,"publisher":{"@id":"https:\/\/www.chinasmartbuy.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.chinasmartbuy.com\/blog\/github-repository-clone-trojan-boryptgrab\/#primaryimage"},"thumbnailUrl":"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/07\/github-e3cff064-6203-4e9e-9988-6515-zlpp7b6uv0.png","articleSection":["News"],"inLanguage":"it-IT","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.chinasmartbuy.com\/blog\/github-repository-clone-trojan-boryptgrab\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.chinasmartbuy.com\/blog\/github-repository-clone-trojan-boryptgrab\/","url":"https:\/\/www.chinasmartbuy.com\/blog\/github-repository-clone-trojan-boryptgrab\/","name":"GitHub, scoperti 292 repository clone usati per diffondere il trojan BoryptGrab","isPartOf":{"@id":"https:\/\/www.chinasmartbuy.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.chinasmartbuy.com\/blog\/github-repository-clone-trojan-boryptgrab\/#primaryimage"},"image":{"@id":"https:\/\/www.chinasmartbuy.com\/blog\/github-repository-clone-trojan-boryptgrab\/#primaryimage"},"thumbnailUrl":"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/07\/github-e3cff064-6203-4e9e-9988-6515-zlpp7b6uv0.png","datePublished":"2026-07-17T19:45:00+00:00","description":"Arctic Wolf ha individuato almeno 292 repository clone su GitHub usati per diffondere BoryptGrab, un trojan Windows che ruba credenziali, cookie e wallet crypto.","breadcrumb":{"@id":"https:\/\/www.chinasmartbuy.com\/blog\/github-repository-clone-trojan-boryptgrab\/#breadcrumb"},"inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.chinasmartbuy.com\/blog\/github-repository-clone-trojan-boryptgrab\/"]}]},{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/www.chinasmartbuy.com\/blog\/github-repository-clone-trojan-boryptgrab\/#primaryimage","url":"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/07\/github-e3cff064-6203-4e9e-9988-6515-zlpp7b6uv0.png","contentUrl":"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2026\/07\/github-e3cff064-6203-4e9e-9988-6515-zlpp7b6uv0.png","width":1288,"height":984,"caption":"GitHub"},{"@type":"BreadcrumbList","@id":"https:\/\/www.chinasmartbuy.com\/blog\/github-repository-clone-trojan-boryptgrab\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.chinasmartbuy.com\/blog\/"},{"@type":"ListItem","position":2,"name":"GitHub, scoperti 292 repository clone usati per diffondere il trojan BoryptGrab"}]},{"@type":"WebSite","@id":"https:\/\/www.chinasmartbuy.com\/blog\/#website","url":"https:\/\/www.chinasmartbuy.com\/blog\/","name":"ChinaSmartBuy","description":"NEWS \u00b7 GUIDE \u00b7 OFFERTE","publisher":{"@id":"https:\/\/www.chinasmartbuy.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.chinasmartbuy.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"it-IT"},{"@type":"Organization","@id":"https:\/\/www.chinasmartbuy.com\/blog\/#organization","name":"ChinaSmartBuy","url":"https:\/\/www.chinasmartbuy.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/www.chinasmartbuy.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2019\/06\/logo-chinasmartbuy-e1560864925407.png","contentUrl":"https:\/\/www.chinasmartbuy.com\/blog\/wp-content\/uploads\/2019\/06\/logo-chinasmartbuy-e1560864925407.png","width":100,"height":100,"caption":"ChinaSmartBuy"},"image":{"@id":"https:\/\/www.chinasmartbuy.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["http:\/\/facebook.com\/chinasmartbuy","https:\/\/t.me\/chinasmartbuy"]},{"@type":"Person","@id":"https:\/\/www.chinasmartbuy.com\/blog\/#\/schema\/person\/d1b2f5d465e9c5f5a3e1316ad64b74c4","name":"Pierluigi Vitale","image":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/secure.gravatar.com\/avatar\/8b619e3d152ede2a93b97f3949cc5fc7878d7ba38909c51ec98d3b14dc3bc635?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/8b619e3d152ede2a93b97f3949cc5fc7878d7ba38909c51ec98d3b14dc3bc635?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8b619e3d152ede2a93b97f3949cc5fc7878d7ba38909c51ec98d3b14dc3bc635?s=96&d=mm&r=g","caption":"Pierluigi Vitale"},"url":"https:\/\/www.chinasmartbuy.com\/blog\/author\/pierluigivitale\/"}]}},"_links":{"self":[{"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/posts\/38464","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/comments?post=38464"}],"version-history":[{"count":1,"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/posts\/38464\/revisions"}],"predecessor-version":[{"id":38465,"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/posts\/38464\/revisions\/38465"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/media\/38463"}],"wp:attachment":[{"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/media?parent=38464"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/categories?post=38464"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.chinasmartbuy.com\/blog\/wp-json\/wp\/v2\/tags?post=38464"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}