Gheist campaign plants secret-dumping workflows using stolen GitHub tokens
36 points by acossta
An automated campaign is exploiting stolen GitHub tokens to implant secret-dumping workflows into accessible repositories. It operates without a command-and-control server and is continuously adapting, although recent security enhancements by GitHub have notably hindered its effectiveness.