2 articles
- 2d agoBleepingComputerEarliestHackers compromise 4,800 GitHub accounts to steal cloud credentials
- YesterdayCSO OnlinePickupThousands of GitHub repos hit with secret-stealing malware
← Back to the boardNews
Hackers compromise 4,800 GitHub accounts to steal cloud credentials
Why it’s here: Specialist technical reporting on a large-scale credential-theft campaign that compromised GitHub accounts of US government bodies (GSA), Fortune 100 firms, and open-source publishers, bearing directly on cybersecurity policy and supply-chain security.
Trace across the boardItem
2d agoBleepingComputer · research by AikidoHackers compromise 4,800 GitHub accounts to steal cloud credentialsThreat actor behind the 'wfx-loot' campaign used about 4,800 compromised GitHub accounts to inject credential-stealing workflows into tens of thousands of repositories and stole CI and cloud secrets from at least 1,835 targets. Cyber12 linked
Coverage
2 outlets · first seen 2d agoConnected
5 links- NewsThousands of GitHub repos hit with secret-stealing malwareBoth involve GitHub, Azure, Amazon Web Services
- NewsThe Infostealer Incursion: Cloud, Code & AI Breaches | Wiz BlogBoth involve GitHub, Azure, Amazon Web Services
- NewsGheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles | Wiz BlogBoth involve GitHub, GitHub Actions
- NewsHow Wiz's Blue Agent Traced a Multi-Cloud Attack | Wiz BlogBoth involve GitHub, Amazon Web Services
- NewsGitHub Actions Security Pt 1: Attacks & Defenses | Wiz BlogBoth involve GitHub Actions
About
- General Services Administration
- GitHub
- Azure
- Amazon Web Services
- Google Cloud Platform
- GitHub Actions