Yape Fake Github Link |verified|

A wave of malicious activity has been identified involving fake GitHub repositories masquerading as "Yape," a popular non-custodial cryptocurrency wallet primarily used in Peru. These repositories are designed to distribute malware, specifically clipboard hijackers and stealers, targeting users' cryptocurrency assets. The attack leverages social engineering and search engine optimization (SEO) poisoning to lure victims into downloading trojanized installers.

However, while GitHub is safe, the content uploaded by anonymous users is not automatically vetted by Microsoft (GitHub’s owner). Any scammer can create a free account, upload a ZIP file or a PowerShell script named yape_hack.exe , and share the link. yape fake github link

The repository contains a file. Because Yape is a mobile app, scams often target Android users. The file is usually an (Android application package) or a .exe (Windows executable) disguised as a setup guide. Sometimes, the code is obfuscated in a .js or .py file that, when run, downloads a secondary payload. A wave of malicious activity has been identified