Octopus Scanner

First seen
2020-04-15 00:00:00
Malware type
trojan
Profile updated
2026-07-07 14:32:17

Targeted industries: technology-and-telecommunications

Context

Octopus Scanner is a malware that targets software development projects by inserting itself into GitHub repositories. It aims to compromise the development environment, potentially leading to the distribution of malicious code through legitimate development channels.

Reports & references

  • malpedia.caad.fkie.fraunhofer.de — Jar.Octopus Scanner (report)
  • blog.nsfocus.net — Github Ocs 0605 (report)
  • securitylab.github.com — Octopus Scanner Malware Open Source Supply Chain (report)

External references