Security · High impactFan score 93 · Tier S
Hackers compromise 4,800 GitHub accounts to steal cloud credentials
BleepingComputer · By Bill Toulas ·
The Brief
- A campaign named 'wfx-loot' used 4,837 compromised GitHub accounts.
- The attackers probed 61,764 repositories and opened pull requests.
- The campaign pushed malware designed to steal secrets and cloud credentials.
Why it matters
If your GitHub account or repositories were part of this campaign, cloud credentials and other secrets stored there may have been exposed to attackers.
Who’s affected
- GitHub account holders
- Teams storing cloud credentials or secrets in GitHub repositories
- #github
- #account-compromise
- #credentials
- #malware
- #security
A new campaign dubbed 'wfx-loot' has unfolded on GitHub where threat actors used 4,837 compromised accounts to probe 61,764 repositories, open pull requests, and push secrets-stealing malware. [...]
Timeline
Campaign reported by BleepingComputer
BleepingComputer
Hackers compromise 4,800 GitHub accounts to steal cloud credentials