

Unlike typical malware campaigns, Stargazers Ghost Network is a distribution-as-a-service operation that leverages thousands of fake GitHub accounts to spread malicious software disguised as legitimate mods and cheat tools. This operation uses GitHub’s trusted platform to distribute malicious Java archives, evading detection while compromising over 1,500 devices since March 2025.