CVE As Lure

A GitHub repository named for a CVE identifier delivers social-engineering malware instead of a proof-of-concept. The repository ranks against the identifier an administrator is searching for while they patch; the artifact inside is a ClickFix landing page, a reCAPTCHA imposter, or a clipboard-paste PowerShell lure. Because the directory holding the lure is named for the CVE, a scanner that polls GitHub for CVE-tagged repositories counts the lure as a PoC and raises the vulnerability's weaponization score.</short_description> <parameter name="rank">0