Private repos still leak secrets to Gheist, a stolen GitHub token campaign

T2Covered by 1 source · first reported by Help Net Security at 27 Oct, 10:58 UTC

Wiz Research has recovered more than 13,500 planted branches from 850+ compromised GitHub accounts, the work of a campaign it calls Gheist, after the user agent the tool sends with its GitHub API requests. The tool takes a stolen token, finds every repository that token can open, and plants a…

devsecurity

Sources

• T2Private repos still leak secrets to Gheist, a stolen GitHub token campaignHelp Net Security27 Oct, 10:58