Fake PS5 Project Repositories Distribute Malware

Technology · First reported 29 Oct, 19:10 · Updated 01:06

Image: Wikimedia Commons · NASA Johnson Space Center · Public domain

Fake GitHub repositories posing as PS5 emulation projects are being used to deliver malware that may steal personal information. The reports advise checking that a download repository is linked to the project’s developers before running files.

NordVPN’s Threat Intelligence team identified fake GitHub repositories posing as KytyPS5 and AnyPS5 projects.
The malware changes Microsoft Defender settings before launching a payload NordVPN assesses as an infostealer; its full capabilities are not confirmed.
Both reports advise verifying repository ownership before downloading; TechSpot also says the findings do not establish how many people were affected.

Summary written by Lux AI from 2 articles

Key facts

Impersonated projects: KytyPS5 and AnyPS5
Defender change: The malware adds Microsoft Defender exclusion rules.
Payload assessment: NordVPN believes the payload is an infostealer; its full capabilities remain unclear.
Reported cleanup: A cleanup script deletes the malware’s files.