conv.

← The whole story
Security
Radware finds coordinated GitHub supply chain attack across 61 repos in 43 minutes

Radware publishes exclusive findings on campaign mechanics and suspected single attacker

1 Oct 29 8:00 AM · 13d ago · 1 article · 4 posts · 3 sources · development 1 of 1

Researchers conclude a single individual coordinated the attacks using 74 mostly compromised accounts with legitimate development histories. They found evidence the malicious commands executed in two cases, exfiltrating environment variables to attacker-controlled servers, but cannot confirm write access or code modifications.

Radware publishes exclusive findings on campaign mechanics and suspected single attacker
theregister.com

“Our guess is that the final aim was a supply-chain attack in which the attacker gains credentials for the repo, and then he has the power to change the contents – the code – as he wishes”

Gabi Nakibly

Gabi Nakibly Radware VP and researcherZvika Babo Radware researcherRadware threat hunters Security research team

The whole story articlesposts the bright band is this development · numbered dots are the others · click one to jump

Peak 3 pieces in 3h at Oct 29, 10 AM; 6 pieces over 14 days (1 article · 5 posts) Oct 29, 7 AM — 1 piece · 1 article — Newswires 1Oct 29, 10 AM — 3 pieces · 3 posts — Hacker News 2, Mastodon 1Oct 29, 1 PM — 1 piece · 1 post — Mastodon 1Oct 29, 4 PM — quietOct 29, 7 PM — quietOct 29, 10 PM — quietOct 30, 1 AM — quietOct 30, 4 AM — quietOct 30, 7 AM — quietOct 30, 10 AM — quietOct 30, 1 PM — quietOct 30, 4 PM — 1 piece · 1 post — Reddit 1Oct 30, 7 PM — quietOct 30, 10 PM — quietOct 31, 1 AM — quietOct 31, 4 AM — quietOct 31, 7 AM — quietOct 31, 10 AM — quietOct 31, 1 PM — quietOct 31, 4 PM — quietOct 31, 7 PM — quietOct 31, 10 PM — quietNov 1, 1 AM — quietNov 1, 3 AM — quietNov 1, 6 AM — quietNov 1, 9 AM — quietNov 1, 12 PM — quietNov 1, 3 PM — quietNov 1, 6 PM — quietNov 1, 9 PM — quietNov 2, 12 AM — quietNov 2, 3 AM — quietNov 2, 6 AM — quietNov 2, 9 AM — quietNov 2, 12 PM — quietNov 2, 3 PM — quietNov 2, 6 PM — quietNov 2, 9 PM — quietNov 3, 12 AM — quietNov 3, 3 AM — quietNov 3, 6 AM — quietNov 3, 9 AM — quietNov 3, 12 PM — quietNov 3, 3 PM — quietNov 3, 6 PM — quietNov 3, 9 PM — quietNov 4, 12 AM — quietNov 4, 3 AM — quietNov 4, 6 AM — quietNov 4, 9 AM — quietNov 4, 12 PM — quietNov 4, 3 PM — quietNov 4, 6 PM — quietNov 4, 9 PM — quietNov 5, 12 AM — quietNov 5, 3 AM — quietNov 5, 6 AM — quietNov 5, 9 AM — quietNov 5, 12 PM — quietNov 5, 3 PM — quietNov 5, 6 PM — quietNov 5, 9 PM — quietNov 6, 12 AM — quietNov 6, 3 AM — quietNov 6, 6 AM — quietNov 6, 9 AM — quietNov 6, 12 PM — quietNov 6, 3 PM — quietNov 6, 6 PM — quietNov 6, 9 PM — quietNov 7, 12 AM — quietNov 7, 3 AM — quietNov 7, 6 AM — quietNov 7, 9 AM — quietNov 7, 12 PM — quietNov 7, 3 PM — quietNov 7, 6 PM — quietNov 7, 9 PM — quietNov 8, 12 AM — quietNov 8, 3 AM — quietNov 8, 6 AM — quietNov 8, 9 AM — quietNov 8, 12 PM — quietNov 8, 3 PM — quietNov 8, 6 PM — quietNov 8, 9 PM — quietNov 9, 12 AM — quietNov 9, 3 AM — quietNov 9, 6 AM — quietNov 9, 9 AM — quietNov 9, 12 PM — quietNov 9, 3 PM — quietNov 9, 6 PM — quietNov 9, 9 PM — quietYesterday, 12 AM — quietYesterday, 3 AM — quietYesterday, 6 AM — quietYesterday, 9 AM — quietYesterday, 12 PM — quietYesterday, 3 PM — quietYesterday, 6 PM — quietYesterday, 9 PM — quietToday, 12 AM — quietToday, 3 AM — quietToday, 6 AM — quietToday, 9 AM — quietToday, 12 PM — quietToday, 3 PM — quietToday, 6 PM — quiet 1
1Radware publishes exclusive findings on…
Oct 30Oct 31Nov 1Nov 2Nov 3Nov 4Nov 5Nov 6Nov 7Nov 8Nov 9now · 9:14 PM ET

What was reported 1 claim about this development

  1. 1 outlet Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour

    first by The Register, 13d ago

What people said 1 voice · verbatim

All 1 developments of Radware finds coordinated GitHub supply chain attack across… →

NewswiresMastodonHacker NewsReddit