Massive GitHub malware operation spreads BoryptGrab stealer

Multiple high-impact malware and espionage campaigns reported: Trend Micro uncovered a large campaign distributing the BoryptGrab information stealer via 100+ GitHub repositories to harvest browsers, crypto wallets, system data and files. Microsoft tracked a ClickFix social‑engineering campaign that abuses Windows Terminal to install the Lumma Stealer. Broadcom/Symantec reported Iran‑linked MuddyWater deploying the Dindoor backdoor against U.S. organizations, and Zscaler linked Dust Specter to phishing delivering new malware families targeting Iraqi officials. Check Point observed Iran‑linked,