Skip to main content
Apexward Pulse
3 reportsPriority Low

Credential theft campaigns targeting cloud and code repositories

UK organisations are facing multiple credential theft efforts targeting cloud environments and code repositories, with attackers using various methods to access sensitive data.

First report Latest

What is going on

  • Attackers are using Alibaba Cloud to host AntiFox, an open-source penetration testing platform, to target web services and AWS environments.
  • A data breach at Chainstack has prompted warnings about potential exposure through compromised credentials.
  • An attacker planted a CI secret stealer in over 1,800 GitHub repositories as part of the wfx-loot campaign, targeting 60,000 repositories.
  • What to watch: Whether the methods used in these campaigns will lead to more widespread exploitation of cloud and code repository vulnerabilities.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed