New ChocoPoC malware targets researchers via trojanized PoC exploits

Cybersecurity researchers are being targeted by a new malware campaign utilizing trojanized proof-of-concept exploits on GitHub, which deliver a Python-based remote access trojan known as ChocoPoC¹. This RAT is capable of executing commands and stealing sensitive data, posing a significant threat to the security community. The campaign involves weaponizing publicly available PoC exploits, which are then used to compromise the systems of researchers who may be testing or analyzing these exploits. ChocoPoC's ability to blend in with legitimate research activities makes it a particularly insidious threat. The use of GitHub as a delivery mechanism highlights the need for researchers to be cautious when interacting with open-source code and exploits. This campaign's success relies on the trust that researchers have in online communities and code repositories, so it is essential for practitioners to prioritize vigilance and verify the integrity of the code they use.