2 articles · BleepingComputer
- 2d agoBleepingComputerEarliestHackers compromise 4,800 GitHub accounts to steal cloud credentials
- YesterdayCSO OnlinePickupThousands of GitHub repos hit with secret-stealing malware
← Back to the boardNews
Thousands of GitHub repos hit with secret-stealing malware
Why it’s here: A large-scale supply-chain and secret-stealing campaign against GitHub and cloud/AI credentials is cybersecurity threat research bearing on federal critical-infrastructure and software supply-chain policy, falling within the cybersecurity technology area despite lacking an explicit policy hook.
Trace across the boardItem
YesterdayCSO Online · research by AikidoThousands of GitHub repos hit with secret-stealing malwareThreat actor behind the 'wfx-loot' campaign used about 4,800 compromised GitHub accounts to inject credential-stealing workflows into tens of thousands of repositories and stole CI and cloud secrets from at least 1,835 targets. Cyber12 linked
Coverage
2 outlets · first seen 2d agoConnected
7 links- NewsHackers compromise 4,800 GitHub accounts to steal cloud credentialsBoth involve GitHub, Azure, Amazon Web Services
- NewsThe Infostealer Incursion: Cloud, Code & AI Breaches | Wiz BlogBoth involve GitHub, Azure, Amazon Web Services
- NewsGheist: Attempted Scaled Abuse of Stolen GitHub Tokens Stumbles | Wiz BlogBoth involve GitHub, GitHub Actions
- NewsHunting for signs of persistence in the cloud: an IR guide following the CircleCI incident | Wiz BlogBoth involve Azure, Amazon Web Services, GCP
- NewsHow Wiz's Blue Agent Traced a Multi-Cloud Attack | Wiz BlogBoth involve GitHub, Amazon Web Services
- NewsTowards a better cloud vulnerability response model | Wiz BlogBoth involve Azure, Amazon Web Services
- NewsGitHub Actions Security Pt 1: Attacks & Defenses | Wiz BlogBoth involve GitHub Actions
About
- GitHub
- Azure
- Amazon Web Services
- GCP
- GitHub Actions