Hackers Compromise 4,800 GitHub Accounts

Researchers at Aikido report that a campaign named wfx-loot compromised 4,800 GitHub accounts to steal cloud credentials. The attack targeted 61,764 repositories, successfully extracting secrets from at least 1,835 targets. Malicious actors utilized stolen credentials to inject scripts into repositories belonging to Fortune 100 organizations and government bodies.