Gheist Campaign Steals GitHub Secrets via Stolen Tokens and Actions Logs
The Gheist group exploits stolen GitHub tokens to extract private repository secrets from GitHub Actions logs, impacting private and Enterprise GitHub environments.
Tag
#GitHub
5 results in the archive.
Credential-Stealing GitHub Actions Workflows Found in Thousands of Repos
Attackers compromised open-source maintainer accounts to plant malicious GitHub Actions workflows stealing credentials in over 340 repositories.
FakeGit Campaign Uses 7,600 GitHub Repos to Spread SmartLoader Malware
Nearly 7,600 malicious GitHub repositories were discovered distributing the SmartLoader malware, leveraging cloned projects and fake profiles to deceive users.
Nearly 300 Fake GitHub Repos Distribute Infostealer Malware
A threat actor created almost 300 counterfeit GitHub repositories impersonating legitimate software projects to deliver infostealer malware, posing a significant supply chain threat.
Attackers Use Dormant GitHub Accounts to Map Corporate Orgs
Datadog Security Labs warns of campaigns using dormant GitHub accounts and compromised OAuth tokens to scrape corporate GitHub organizations and user data through the GitHub API. Attackers automate scraping with custom or legitimate-sounding user agents to blend in and avoid detection.