# Hackers compromise 4,800 GitHub accounts to steal cloud credentials

Source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/hackers-compromise-4-800-github-accounts-to-steal-cloud-credentials/) · 2026-11-12 · Security
Page: https://themorning.dev/story/hackers-compromise-4-800-github-accounts-to-steal-cloud-credentials-674c4b85088a00ce
Kind: security · Impact: high

## In brief

- A campaign named 'wfx-loot' used 4,837 compromised GitHub accounts.
- The attackers probed 61,764 repositories and opened pull requests.
- The campaign pushed malware designed to steal secrets and cloud credentials.

## Why it matters

If your GitHub account or repositories were part of this campaign, cloud credentials and other secrets stored there may have been exposed to attackers.

## Timeline

- 2026-11-12: Campaign reported by BleepingComputer

## Coverage

- [Hackers compromise 4,800 GitHub accounts to steal cloud credentials](https://www.bleepingcomputer.com/news/security/hackers-compromise-4-800-github-accounts-to-steal-cloud-credentials/) — BleepingComputer, 2026-11-12

Tags: github, account-compromise, credentials, malware, security

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev