Trojanized PoC Exploits Deliver ChocoPoC RAT via Malicious PyPI Packages
Threat actors are abusing the trust researchers place in public GitHub repositories and the PyPI ecosystem by embedding malicious Python packages into the dependency lists of seemingly legitimate proof-of-concept exploits. When researchers clone these repositories and run standard installation commands, they unknowingly execute the ChocoPoC remote access trojan. This attack is particularly dangerous because it specifically targets security professionals, who are high-value targets with privileged access to sensitive systems and research data. The campaign exploits a systemic blind spot: developers and researchers often install dependencies without scrutinizing the full package supply chain. This highlights how the open-source ecosystem's openness can be weaponized to compromise even technically sophisticated victims.
Tactical Insight
Immediate actions
- Audit any recently cloned PoC repositories for unexpected or unrecognized dependencies before running installation commands.
- Search PyPI and GitHub for packages listed in PoC dependency files and verify their legitimacy against known-good sources or official maintainers.
Long-term improvements
- Use isolated virtual environments, containers, or sandboxes when testing any third-party or community-sourced code, especially PoC exploits.
- Implement a dependency vetting policy that requires hash-pinning and cross-referencing package integrity (e.g., via `pip-audit` or `pipenv`) before installation.
- Establish an internal approved-packages registry for commonly used research tools to reduce reliance on unvetted public repositories.
Detection measures
- Deploy endpoint detection tools capable of identifying anomalous Python process behavior, outbound connections, or RAT-like activity triggered post-package installation.
- Monitor network egress for unexpected connections originating from development or research workstations following new software installations.
- Enable alerting on PyPI package downloads that reference newly published or low-download-count packages flagged in dependency files.