Thousands of GitHub repositories targeted in widespread attack — 4,800 accounts already compromised to steal cloud…
- Threat actors used 4,837 compromised GitHub accounts to open pull requests across 61,764 repositories
- At least 1,835 repositories executed the payload and had credentials exfiltrated
- Authentication tokens, AWS, Azure and Google Cloud credentials, and more, targeted
Cybercriminals were recently seen abusing multiple GitHub features to deploy infostealers and exfiltrate user’s cloud login credentials and other secrets.
Tens of thousands of repositories have already been targeted, and almost 2,000 fell prey to the attack, cybersecurity researchers Aikido said, in a recent report outlining how the attackers used stolen GitHub credentials to abuse GitHub Actions and workflows, two features designed to speed up and automate certain activities.
GitHub is a platform for developers working on open source projects. Each project has its own “repository” - a folder containing source code, configuration files, and other resources. Developers can propose changes to public repositories through a process called “pull request”, after which other developers...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
