The account is gone. The code persists. And somewhere, in a dark corner of the internet, a new villain is cloning that repository, preparing for the next iteration. The only question is: What will they call themselves in 2025? Disclaimer: This article is for educational and historical documentation purposes only. The author does not endorse the use of malicious software, nor does the author have any affiliation with DC Comics or GitHub. Always practice ethical hacking with proper authorization.
The debate ended abruptly in October 2021. GitHub, under pressure from Microsoft (its parent company) and legal requests from unnamed financial institutions, suspended the original "Lex Luthor Dev" account. The notice was standard: "Violation of GitHub's Terms of Service regarding the distribution of malicious code." lex luthor dev github 2021
Cybersecurity firms like CrowdStrike and Mandiant noted an uptick in 2021 Q3 of threat actors using obfuscation techniques that mirrored MetropolisC2 . While no direct evidence linked Lex Luthor to actual ransomware groups (like Conti or REvil at the time), the correlation was undeniable. The account is gone
In late 2021, a movement called "The Hall of Justice Archive" (a tongue-in-cheek nod to the Super Friends) began mirroring the Lex Luthor Dev repositories on platforms like GitLab, Bitbucket, and even IPFS (InterPlanetary File System). The only question is: What will they call themselves in 2025