Our study highlights how public platforms, trust in open collaboration, and the rapid dissemination of software can be exploited to distribute misinformation or conduct covert operations. We explored the Node.js code on GitHub and we revealed a coordinated online deception involving fake companies. What started as an inquiry into potential malware evolved into a broader examination of how open-source ecosystems can be manipulated for geopolitical or criminal purposes.
By tracing digital footprints, analyzing behavioral patterns, and connecting disparate online identities, the investigation uncovered a network of fabricated corporate entities designed to project legitimacy and obscure malicious intent. Beyond the specific case, it raises questions about the intersection of cybersecurity, transparency, and global digital ethics. The findings emphasize the need for stronger verification practices, responsible reporting, and collective vigilance within developer and research communities to preserve the integrity of open digital spaces.

The practicality of conducting a BadUSB attack using a Raspberry Pi Pico, demonstrating how an inexpensive micro-controller can be turned into a malicious USB device using both open-source code (pico-ducky project, open source ducky scripts, unicorn.py etc) as well as custom created code was investigated. The experiment recreated a realistic attack scenario where the Pico acted as a fake keyboard, automatically disabling Windows security features, altering registry settings, and executing a fileless payload that granted remote access, without user interaction. Digital forensic analysis revealed that while the attack was approximately fast, it left behind identifiable traces such as registry modifications, USB logs, and PowerShell histories, proving that post-incident detection is possible. Defensive strategies ranging from physical safeguards like USB port blockers to administrative policies restricting USB drivers, was explored and emphasized user awareness as a critical defense layer. The simplicity of executing BadUSB attacks and the effectiveness of forensic and preventive countermeasures was demonstrated.