---
title: "Discussion on \"Fake Security Tools on GitHub Run Code When You Build Them\" | Hashnode"
description: "Discussion on \"Fake Security Tools on GitHub Run Code When You Build Them\". Doctor Web counted 2,000+ infected PCs. How the .suo and PreBuildEvent tricks work, what Trojan.Loader.3261 disables, and how to check a repo first."
url: "https://hashnode.com/posts/fake-security-tools-github-visual-studio-malware/6af080825e148fe7076e244f"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Fake Security Tools on GitHub Run Code When You Build Them](https://404-founders.com/blog/fake-security-tools-github-visual-studio-malware?utm_source=hashnode&utm_medium=feed)

Doctor Web counted 2,000+ infected PCs. How the .suo and PreBuildEvent tricks work, what Trojan.Loader.3261 disables, and how to check a repo first.

4d ago · 13 min read · 404-founders.com  
Read the article

-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#malware](https://hashnode.com/tag/malware)
-   [#github](https://hashnode.com/tag/github)
-   [#threat-intelligence](https://hashnode.com/tag/threat-intelligence)
-   [#infosec](https://hashnode.com/tag/infosec)

## Written by

[404 Founders](https://hashnode.com/@404-founders)

@404-founders · Bosnia and Herzegovina, Estonia

  
[View profile](https://hashnode.com/@404-founders)

Error-proof Cyber Solutions

Securing the digital frontier. Error-proof cyber solutions.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.