New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

Security researchers are being targeted by a new malware campaign called ChocoPoC RAT that's distributed through fake proof-of-concept exploit repositories on GitHub. The attackers are specifically going after vulnerability researchers who regularly download and test exploit code, using these poisoned repositories to deliver remote access trojans to their systems. This social engineering tactic exploits the trust researchers place in the security community when sharing and testing new vulnerability demonstrations.