Hackers compromise 4,800 GitHub accounts to steal cloud credentials

A new campaign dubbed 'wfx-loot' has unfolded on GitHub where threat actors used 4,837 compromised accounts to probe 61,764 repositories, open pull requests, and push secrets-stealing malware. [...]

Číst originál na BleepingComputer →

2 zprávy z 2 zdrojů · první 12. 11. 2026 02:45 CZ · EN/orig

GitHub US BE

tg: varování tg: rozbor tp: malware tp: dodavatelský řetězec tp: identita

Jak se o tom psalo 2

12. 11. 2026 23:25 · BleepingComputer US nadpis události

Hackers compromise 4,800 GitHub accounts to steal cloud credentials

A new campaign dubbed 'wfx-loot' has unfolded on GitHub where threat actors used 4,837 compromised accounts to probe 61,764 repositories, open pull requests, and push secrets-stealing malware. [...]
12. 11. 2026 02:45 · Aikido Security BE

Compromised GitHub accounts push CI secret stealer to tens of thousands of repositories

A wave of compromised accounts are pushing a CI secret stealer. See if you’re affected, what it steals, and what to rotate. Category: Vulnerabilities & Threats

Jak se o tom psalo 2

Hackers compromise 4,800 GitHub accounts to steal cloud credentials

Compromised GitHub accounts push CI secret stealer to tens of thousands of repositories