Threats Tagged 'operation muck and load'
View all threats tagged with 'operation muck and load'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'operation muck and load'
Click on any threat for detailed analysis and mitigation recommendations
Malicious Go Module Exposes GitHub Malware Lure Network Spanning 222 Repositories 0 A malicious Go module masquerading as a DNS/subdomain scanner has been identified as part of a sophisticated Windows malware staging operation named 'Muck and Load'. This operation uses a large GitHub-based infrastructure of 222 repositories across 190 accounts, employing automated workflows to appear legitimate. The malicious module downloads encoded PowerShell scripts that retrieve encrypted payloads from public platforms like Pastebin and Telegram. These payloads include well-known malware such as AsyncRAT, Quasar, Remcos, and Vidar infostealers, which are executed from disguised Microsoft-themed directories. At least 14 malware files have been confirmed within this network. Join the discussion | AlienVault OTX General | 07/09/2026, 08:24:59 UTC Added: 07/09/2026, 11:32:31 UTC |
Showing 1 to 1 of 1 result