EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades

A sophisticated malicious campaign, identified by Atos Threat Research Center in March 2026, targets enterprise administrators, DevOps engineers, and security analysts by impersonating administrative tools via GitHub facades. The operation uses SEO techniques to distribute EtherRAT, a high-resilience malware.