SecurityLobstersabout 1 hour ago
Git Hook Attack Targets Developer Credentials via Dropbox
2 min read
A developer discovered a sophisticated phishing attempt disguised as a legitimate project review. The attacker embedded a malicious post-checkout hook within a shared Dropbox folder, attempting to execute arbitrary code to steal credentials via a Vercel command and control server.
Level
Hype check
Tap to vote and see what everyone thinks.
