RICHTVXNEWS
Hackers compromise 4,800 GitHub accounts to steal cloud credentials
BLEEPINGCOMPUTER — A new campaign dubbed 'wfx-loot' has unfolded on GitHub where threat actors used 4,837 compromised accounts to probe 61,764 repositories, open pull requests, and push secrets-stealing malware. [...]
- CODE
- RT-674C4B
- PUBLISHER
- BleepingComputer
- TOPIC
- Cybersecurity
- PUBLISHED
- 12 November 2026 · 22:25 UTC
- FIRST SEEN
- 12 November 2026 · 22:30 UTC
- ORIGINAL
- https://www.bleepingcomputer.com/news/security/hackers-compromise-4-800-github-accounts-to-steal-cloud-credentials/
- SHA-256
- 29a3a4e747b6406ff8f5e3f167da1b5fd222aaeb8786f94103abbe91c1b6987c
The fingerprint is the SHA-256 of the original link, the headline and the publication time joined by “|”. Anyone can recompute it to confirm the headline and link were not changed here.
Headline and short excerpt from BleepingComputer, taken from its public news feed. The full story and its photos belong to BleepingComputer — read it at the original. RICHTVX NEWS is an independent aggregator and is not affiliated with BleepingComputer. Corrections: legal@richtvx.news.
More from BLEEPINGCOMPUTER
New worm-like 'SCKit' malware targets MSPs in ScreenConnect attacksRT-3B8D77 · CYBERSECURITY
Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot worldwideRT-FD416D · CYBERSECURITY
New N-able "4EverAble2Shell" zero-day exploited hours after PoC releasedRT-5E7C3D · CYBERSECURITY
New Windows SignDrop zero-day gives hackers SYSTEM privilegesRT-AD9757 · CYBERSECURITY
Police dismantle Gootloader, CastleRAT, StealC malware infrastructureRT-62FF99 · CYBERSECURITY
Your Endpoint Management Platform Could Be Your Biggest Security RiskRT-28AB9A · CYBERSECURITY