Multiple weaponized PoC exploits on GitHub have been identified as delivery mechanisms for ChocoPoC, a Python-based RAT. The malware allows remote attackers to execute arbitrary commands and exfiltrate sensitive information from infected hosts. The campaign appears focused on cybersecurity researchers who may download and run these trojanized PoC exploits. No specific affected software versions or CVEs are associated with this threat. There is no indication of known exploits in the wild beyond the initial discovery.

Successful infection with ChocoPoC can lead to unauthorized remote command execution and theft of sensitive data from targeted systems. The campaign specifically targets cybersecurity researchers, potentially compromising their investigative environments and sensitive research data. No broader impact or widespread exploitation has been reported.

No official patches or vendor advisories are available for this threat. Mitigation involves exercising caution when downloading and executing PoC exploits from untrusted or unofficial sources, especially from public repositories like GitHub. Researchers should verify the integrity and authenticity of PoC code before use and consider running such code in isolated, controlled environments to prevent compromise.