---
title: "New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos — Stuff That Spins"
description: "Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories on GitHub that claim to exploit hot new CVEs. Run one, and it quietly lifts your saved passwords, …"
	canonical: "https://stuffthatspins.com/spin/new-chocopoc-rat-targets-vulnerability-researchers-via-fake-poc-exploit-repos"
html: "https://stuffthatspins.com/spin/new-chocopoc-rat-targets-vulnerability-researchers-via-fake-poc-exploit-repos"
json: "https://stuffthatspins.com/spin/new-chocopoc-rat-targets-vulnerability-researchers-via-fake-poc-exploit-repos.json"
markdown: "https://stuffthatspins.com/spin/new-chocopoc-rat-targets-vulnerability-researchers-via-fake-poc-exploit-repos.md"
keywords: ["SpinGraph", "spin analysis", "GEO"]
date: "2026-07-02T07:24:23+00:00"
modified: "2026-07-05T04:42:16.430136+00:00"
json_ld: |
  {"@context":"https://schema.org","@graph":[{"@type":"NewsArticle","@id":"https://stuffthatspins.com/spin/new-chocopoc-rat-targets-vulnerability-researchers-via-fake-poc-exploit-repos#article","headline":"New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos","description":"Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories on GitHub that claim to exploit hot new CVEs. Run one, and it quietly lifts your saved passwords, …","datePublished":"2026-07-02T07:24:23+00:00","dateModified":"2026-07-05T04:42:16.430136+00:00","url":"https://stuffthatspins.com/spin/new-chocopoc-rat-targets-vulnerability-researchers-via-fake-poc-exploit-repos","mainEntityOfPage":{"@type":"WebPage","@id":"https://stuffthatspins.com/spin/new-chocopoc-rat-targets-vulnerability-researchers-via-fake-poc-exploit-repos"},"isAccessibleForFree":true,"inLanguage":"en-US","articleSection":"cybersecurity","author":{"@type":"Organization","name":"Stuff That Spins"},"publisher":{"@id":"https://stuffthatspins.com/#organization"},"citation":"https://thehackernews.com/2026/07/new-chocopoc-rat-targets-vulnerability.html","about":[],"mentions":[]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Stuff That Spins","item":"https://stuffthatspins.com/"},{"@type":"ListItem","position":2,"name":"New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos","item":"https://stuffthatspins.com/spin/new-chocopoc-rat-targets-vulnerability-researchers-via-fake-poc-exploit-repos"}]}]}
---

# New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

**Source:** Unknown  
**Published:** July 2, 2026  
**Original:** https://thehackernews.com/2026/07/new-chocopoc-rat-targets-vulnerability.html  

---
*HTML version: https://stuffthatspins.com/spin/new-chocopoc-rat-targets-vulnerability-researchers-via-fake-poc-exploit-repos*