RevStealer Is Built to Be Silent

Scam Reports Other Active 14 views View on BitcoinTalk

RevStealer, a stealth-focused Windows infostealer malware that is distributed through a fake “Claude Opus 5 Free Desktop” GitHub repository.

Any device that is affected by this malware can steal browser databases, session cookies, cryptocurrency wallets, password-manager artifacts and VPN configurationn as usual which is common to infostealer malware.

https://www.morphisec.com/blog/revstealer-silence-is-its-greatest-weapon/

I have been seeing malware that is distributed through GitHub repository. I think it is more becoming common than before.

Sep 01, 2026 16:16

quote

Like 0 Dislike

RevStealer, a stealth-focused Windows infostealer malware that is distributed through a fake “Claude Opus 5 Free Desktop” GitHub repository.

Any device that is affected by this malware can steal browser databases, session cookies, cryptocurrency wallets, password-manager artifacts and VPN configurationn as usual which is common to infostealer malware.

https://www.morphisec.com/blog/revstealer-silence-is-its-greatest-weapon/

I have been seeing malware that is distributed through GitHub repository. I think it is more becoming common than before.

Edited Sep 12, 2026 15:05

Report to moderator

Comments (4)

Scammers presumably keep getting creative with their attempts, but still the basic prevention methods still work for the most part to prevent someone from falling victim.

I know this is warning about a malware which is intended to scam people but I am not sure this is the right thread for it. I usually see scams by presumably legitimate websites here and this sort of posts I see in the beginners and help.

- Jay -

Re: RevStealer Is Built to Be Silent

Sep 01, 2026 20:17

quote

Like 0 Dislike

Scammers presumably keep getting creative with their attempts, but still the basic prevention methods still work for the most part to prevent someone from falling victim.

I know this is warning about a malware which is intended to scam people but I am not sure this is the right thread for it. I usually see scams by presumably legitimate websites here and this sort of posts I see in the beginners and help.

- Jay -

Report to moderator

[quote=_act_ on September 01, 2026, 04:16:24 PM]
I have been seeing malware that is distributed through GitHub repository. I think it is more becoming common than before.

[/quote]Yeah, thereÂs more malware being hosted on GitHub day by day.. GitHub allows any code to be dumped on it, and you can create as many accounts as you like,  dump any file on it and make it hidden from everyone.

GitHub also creates this sense of safety for some peeps ..especially when they hear that a piece of code is open source.. Some believe that anything open source is safe, which is completely wrong but it works in favor of bad actors anyway..

Re: RevStealer Is Built to Be Silent

Sep 01, 2026 21:05

quote

Like 0 Dislike

Quote from: _act_ on September 01, 2026, 04:16:24 PM
I have been seeing malware that is distributed through GitHub repository. I think it is more becoming common than before.

Yeah, thereÂs more malware being hosted on GitHub day by day.. GitHub allows any code to be dumped on it, and you can create as many accounts as you like, dump any file on it and make it hidden from everyone.

GitHub also creates this sense of safety for some peeps ..especially when they hear that a piece of code is open source.. Some believe that anything open source is safe, which is completely wrong but it works in favor of bad actors anyway..

Report to moderator

[quote=un_rank on September 01, 2026, 08:17:57 PM]
Scammers presumably keep getting creative with their attempts, but still the basic prevention methods still work for the most part to prevent someone from falling victim.

[/quote]I wouldn't say that they are getting creative, it's the same as what it used to be, malwares here and there. And if you are just a person that simply downloads everything you see in the web, then you could be the next victim.

Perhaps it's time for us to take into consideration that although Github has a built in reputation as a repository, scammers is also disguising and using the platform to spread their malware.

Re: RevStealer Is Built to Be Silent

Sep 02, 2026 09:18

quote

Like 0 Dislike

Quote from: un_rank on September 01, 2026, 08:17:57 PM
Scammers presumably keep getting creative with their attempts, but still the basic prevention methods still work for the most part to prevent someone from falling victim.

I wouldn't say that they are getting creative, it's the same as what it used to be, malwares here and there. And if you are just a person that simply downloads everything you see in the web, then you could be the next victim.

Perhaps it's time for us to take into consideration that although Github has a built in reputation as a repository, scammers is also disguising and using the platform to spread their malware.

Report to moderator

[quote=promise444c5 on September 01, 2026, 09:05:07 PM]
GitHub also creates this sense of safety for some peeps ..especially when they hear that a piece of code is open source.. Some believe that anything open source is safe, which is completely wrong but it works in favor of bad actors anyway..

[/quote]ThatÂs true. Some projects that upload malware to their websites include a link to a GitHub repository. Because many people donÂt know how to inspect code, they think the project is safe because of this. 

There are projects that upload malicious wallets with malware to their websites even if the source code appears to be clean. There are also projects that include links to legitimate projects to make people believe they are affiliated with them, but in reality they are scams spreading malware and have nothing to do with the GitHub repos they link. 

People can also create GitHub accounts pretending to be real projects. So people should stick to official links, and they should also check the repositoryÂs stars, forks, activity, and the account behind it, and verify the GitHub link through the projectÂs official website.

Re: RevStealer Is Built to Be Silent

Sep 02, 2026 15:30

quote

Like 0 Dislike

Quote from: promise444c5 on September 01, 2026, 09:05:07 PM
GitHub also creates this sense of safety for some peeps ..especially when they hear that a piece of code is open source.. Some believe that anything open source is safe, which is completely wrong but it works in favor of bad actors anyway..

ThatÂs true. Some projects that upload malware to their websites include a link to a GitHub repository. Because many people donÂt know how to inspect code, they think the project is safe because of this.

There are projects that upload malicious wallets with malware to their websites even if the source code appears to be clean. There are also projects that include links to legitimate projects to make people believe they are affiliated with them, but in reality they are scams spreading malware and have nothing to do with the GitHub repos they link.

People can also create GitHub accounts pretending to be real projects. So people should stick to official links, and they should also check the repositoryÂs stars, forks, activity, and the account behind it, and verify the GitHub link through the projectÂs official website.

Report to moderator

← Back to home

Other Incidents (50)

Bitcoinsbest.com Active

Most Solved

Verified partner — explore safe platforms

Visit →

#1 Changenow.io

0 / 1 / 0

#2 Bc.game

3 / 1 / 0

#3 Tomboi.exchange

0 / 1 / 0

Most Scammy

#1 Other

26 / 0 / 0

#2 Stake.com

6 / 0 / 0

#3 Bc.game

3 / 1 / 0

Comments (4)

Other Incidents (50)

🚀 BitcoinsBest.com  Your Ad On The FRONT PAGE FOREVER! (Just $5) EPIC OFFER!

✅ [INFRAWIRE.NET] Premium High Quality Cheapest cPanel & VPS/VDS Hosting

Scam accusation: Duckdice.io - $941 USD, obtained winnings via abusive means

Duckdice.io - beware

[SHILLING / CHATTERS] WW's SERVICES - EmoneyMax.net The Best Shilling Service!

Kings.game are keeping my money

KycNotList.com Admin Scam XHash Deposit

Mexican Rock Star and Family Dead as Suspects Allegedly Hunted Cold Wallet They

Trocador phishing site

Stake.com - The World's largest Casino - Drake, UFC, Everton, Stake F1 Team

🏅 1win.com - Casino ' Sportsbook | Poker ♠️♥️

🔥 Reels.io | No KYC Casino | 275% BONUS  NFT for first deposit 🎁

🔥 EarnBet.io | No KYC Casino | 62.5% Rakeback  Highest Rebate 💎

🔎 [ANN] KycNotList.com  No KYC / No AML Crypto Exchange Monitor

NULLCART.NET START YOUR CRYPTO SHOP WITH NULLCART FOSS!!!

Lizex.io  Your Gateway to Safe and Fast Swaps

CoinPal / IceRiver Uncredited Payment Swept into Treasury Wallet

Unverified Scam Report Against Elcapo.io - Seeking More Information

biggerz scam casino. closed account without any reason to steal winnings 6.75btc

https://ppchange.com.ua  SCAMMERS (Additional information)

[SCAM ACCUSATION] 1win.com  Refusing to credit deposit.

AVOID KIKABET - Withholding my funds and completely ignoring me

Swapka.online - new crypto exchange

Rollhub.com (formerly Blackjack.fun )

Exposing scammers! Exposing scammers! Exposing scammers!

dontkyc.me No-KYC directory (Earn Crypto as a User, Scam Bounty Cash!)

ExFinder.io - service for searching/comparing crypto exchangers, finance tools

$1M Cash Airdrop ⭐ Razed.com ⭐ The Best Crypto Casino ♠♥♦♣

Near Intent (near.com) LTC wallet offline?

Lucky.fun blocked my account. Stole around 300$ in the account balance.

SCAM ACCUSATION: TorWex  15,000 RUB withheld, false cancellation and threats

Sportsbet.io confiscated my winnings after KYC citing Rule 20.1

TRUSTHOSTING.IO ✅ RDP/VPS HOST ✅ FAST,ANONYMOUS,PRIVATE ✅ SELFHOSTED ✅ 3.99$

LUX POLiCE OF UNiTED & DiViDED NATiONALiTiES

Re: ExFinder.io - service for searching/comparing crypto exchangers, finance too

InvestmentScript.com - Complete Admin Control Crypto Investment Script and Setup

👑 Jackpotter.com 👑 | Community Powered Crypto Casino 🎁 | Sportbook ⚽

MineBit.com | 10,000+ Games | 20% of Gaming Revenue Shared Every Friday

AltQuick.com - Bitcoin, Bitcoin Testnet, & Altcoin exchange & no account swap!

[No KYC] Prepaid Cards, Gift Cards and eSIM data plans | Stealths.NET

⭕ BitList.co - Mixers ' Exchanges ' Services ' Casinos

[GEEKPROXY.IO] - DC | ISP | Residential | Mobile Proxy

1popularity.com SMM Service follows,subs,likes - Instagram - Tik tok -Facebook

👑 CoinRoyale.com - Original Bitcoin Casino | Trusted Since 2013 ✔️

👑 MegRewards.com 🦵KICK live 👉 SLOTS 🎰 WINS 💎 VIBES ✨ $12,500 Leaderboard 💰

https://ppchange.com.ua  SCAMMERS

EARNBET.IO takes my deposit (7.7 ETH) and profits 8 ETH (total SCAM 35K USD)

P2PB2B  Unfulfilled Listing (15,000 USDT) & Non-Verifiable Marketing

USD PLUS (USDPLUS.LIVE) New Domain, No Liquidity, Red Flags

[ANN] CryptoScored.org  Crypto platform directory & user reviews

Most Solved

Most Scammy

🚀 BitcoinsBest.com Your Ad On The FRONT PAGE FOREVER! (Just $5) EPIC OFFER!

Scam accusation: Duckdice.io - $941 USD, obtained winnings via abusive means

🔥 Reels.io | No KYC Casino | 275% BONUS NFT for first deposit 🎁

🔥 EarnBet.io | No KYC Casino | 62.5% Rakeback Highest Rebate 💎

🔎 [ANN] KycNotList.com No KYC / No AML Crypto Exchange Monitor

Lizex.io Your Gateway to Safe and Fast Swaps

https://ppchange.com.ua SCAMMERS (Additional information)

[SCAM ACCUSATION] 1win.com Refusing to credit deposit.

dontkyc.me No-KYC directory (Earn Crypto as a User, Scam Bounty Cash!)

SCAM ACCUSATION: TorWex 15,000 RUB withheld, false cancellation and threats

https://ppchange.com.ua SCAMMERS

P2PB2B Unfulfilled Listing (15,000 USDT) & Non-Verifiable Marketing

[ANN] CryptoScored.org Crypto platform directory & user reviews