> TritonInfoSec News
Home / Jul 03, 2026 / Story
0
#7 The Hacker News general July 02, 2026 at 07:24 UTC

New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

By [email protected] (The Hacker News)

AI Summary

Attackers distributed a Python-based RAT called ChocoPoC via fake proof-of-concept exploit repositories on GitHub, specifically targeting vulnerability researchers by impersonating PoC code for high-profile CVEs. Once executed, ChocoPoC exfiltrates saved passwords, browser cookies, and files, and provides the attacker with a remote shell. YesWeHack researchers flagged the campaign, underscoring the persistent risk of supply-chain-style attacks against the security research community itself.

Read full article → https://thehackernews.com/2026/07/new-chocopoc-rat…

Relevance score: 79.0/100

# More from July 03

  1. 1
    FBI Seizes NetNut Proxy Platform, Popa Botnet Krebs on Security
  2. 2
    FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations The Hacker News
  3. 3
    SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation The Hacker News
  4. 4
    Ransomware Groups Turn to Citrix Bleed 2, BYOVD, and Supply Chain Credentials The Hacker News
  5. 5
    AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack The Hacker News
  6. 6
    Cisco finally confirms attackers exploiting Unified CM flaw BleepingComputer
  7. 8
    Hackers target Microsoft 365 accounts with 81 million login attempts BleepingComputer
  8. 9
    Spyware found on phone of European Parliament member probing it The Record
  9. 10
    Adobe Patches Critical ColdFusion, Campaign Classic Vulnerabilities SecurityWeek