/
ttps_attack:T1557 × victim_sectors:"software development" × limpar

Resultados

2 casos · pág. 1/1

bleepingcomputer.com · medium

Sponsored analysis: stolen GitHub tokens, ClickFix lures for Claude Code and help desk vishing enable data theft within minutes

A vendor-sponsored analysis by Exaforce (published on bleepingcomputer.com) says attackers are enumerating or exfiltrating data within about 15 minutes of gaining access. It describes three patterns: stolen developer GitHub OAuth tokens, ClickFix lures that impersonate Claude Code install instructions to deliver a macOS stealer, and help …

Scattered Spider technology software development
thehackernews.com · high

GhostAction operators phish GitHub maintainers and plant font-disguised stealer in 94 repositories

The threat actor behind the GhostAction supply chain campaign has expanded beyond malicious GitHub Actions workflows. According to OpenSourceMalware, it now phishes open-source maintainers and plants a second-stage credential stealer disguised as a font file. The shift appears to follow GitHub's October 9 block on the malicious workflow, …

GhostAction technology software development