A threat actor known as Stargazer Goblin has built a network of over 3,000 GitHub accounts for phishing purposes. The hacker has been creating the network since August 2022 where they began using it in a distribution-as-a-service (DaaS) operation. The 3,000 accounts form what is known as the Stargazers Ghost Network. On this network the accounts distribute malware and malicious links. Stargazer Goblin is estimated to have made over $100,000 since they began building the network. 

Read more: https://www.securityweek.com/network-of-3000-github-accounts-used-for-malware-distribution/