SECURITYACTIVE
47 mins ago
Hackers compromise 4,800 GitHub accounts to steal cloud credentials
SIGNALSMONITORSECURITY
What's happening
SignalsMonitor is following this as a security story. BleepingComputer is the outlet attached so far. The first report grouped here was at 12 Nov 2026, 22:25 UTC. The headline in use is “Hackers compromise 4,800 GitHub accounts to steal cloud credentials”. This note is SignalsMonitor's own briefing, not the publisher's article.
What we know
A new campaign dubbed 'wfx-loot' has unfolded on GitHub where threat actors used 4,837 compromised accounts to probe 61,764 repositories, open pull requests, and push secrets-stealing malware. [...
BleepingComputerRead at BleepingComputer
Story timeline
Reports grouped into this story, earliest first. Exact repeats from the same outlet are collapsed.
- First reported by BleepingComputer
Hackers compromise 4,800 GitHub accounts to steal cloud credentials
Reported by 1 outlet
- BleepingComputer