Hacker News2h agoenergy 107
Gheist campaign plants secret-dumping workflows using stolen GitHub tokens
image: Hacker News
An automated campaign is planting secret-dumping workflows in every repository that stolen GitHub tokens can reach. It uses no C2 server, is actively evolving, and has been significantly disrupted by recent GitHub security improvements.
This source publishes only a summary in its feed, so the full article lives at the outlet. The link above and below goes to the original.