There’s this weird github repository

https://github.com/OOOO00000000OOOO/OOOO00000000OOOO

I noticed there was someone attempting to proxy to this repository on my site, causing it to show up in the logs. It was detected as spam but this repo doesn’t look like it’s built by some normal spammy company. The owner has gone through great lengths to try to stay anonymous. And I can’t make out what the repo is or what it’s for. Does anyone know or have any ideas?

Thanks

  • ludrol@programming.dev
    link
    fedilink
    arrow-up
    30
    ·
    edit-2
    4 days ago

    At first glance there is a lot of noise that look like an ARG but there is just too much random stuff. There are some binary blobs that are marked as executable. They might be malware.

    Edit:

    Found blender screenshots, firefox screenshots with some firefox extension config files, SVGs and PNGs, links to alternative 4chans, solidworks tutorials and blender VK groups

    They are crazy for using VERY heavily riced windows that is ultra-minimalist white.

    Russian hacker for sure. Might or might not have developed malware. I am more inclined for this to be a cloud backup hosted on github.

    Edit2: The Filepath is crazy

    • mark@programming.devOP
      link
      fedilink
      arrow-up
      9
      ·
      edit-2
      4 days ago

      It’s insane, right? I was looking through the files and trying to find anything that made sense. None of it does. I thought it was some foreign or custom encoded programming language or something.

      • ludrol@programming.dev
        link
        fedilink
        arrow-up
        16
        ·
        edit-2
        4 days ago

        It makes sense in Terry A. Davis/Temple OS sense. Someone mentally ill needs everything to be symmetrical. They substitute o with Ⓞ in www.gⓄⓄgle.com I think they use fancy unicode to have a bearable symmetrical font; And someday they found that they can upload stuff to github and they upload what they made.

    • mark@programming.devOP
      link
      fedilink
      arrow-up
      9
      arrow-down
      1
      ·
      4 days ago

      Good idea. I didn’t report it before because I wasn’t quite sure of whether or not it was malicious or just someone testing something out. But it’s clear this person isn’t just testing or debugging something. I’ll report. Thanks!

  • talkingpumpkin@lemmy.world
    link
    fedilink
    arrow-up
    7
    arrow-down
    1
    ·
    4 days ago

    No idea, but it’s certainly not the intended use of github.

    Have you already reported the user (look at their other repos) or should I?

    • theherk@lemmy.world
      link
      fedilink
      arrow-up
      2
      ·
      4 days ago

      Several such repositories very similar. I’m thinking some strange encoding for using it as remote storage of some sort.

    • mark@programming.devOP
      link
      fedilink
      arrow-up
      3
      arrow-down
      1
      ·
      4 days ago

      Just reported. Wasn’t sure if I should at first. But the more people who report it, the better, right? ;) Thanks