Brand-Impersonation

Since late June 2026, an unattributed threat actor has launched a campaign leveraging over 290 deceptive GitHub repositories that impersonate legitimate software and security vendors, including Arctic Wolf, to deliver the BoryptGrab-Lineage infostealer through concealed download links, compromising victim systems upon execution.