CERT24GhostAction Compromised About 1,900 GitHub Accounts and Targeted Over 30,000 RepositoriesLoading data…
CERT24Threat Observatory
Period

GhostAction Compromised About 1,900 GitHub Accounts and Targeted Over 30,000 Repositories

The supply-chain attack campaign known as GhostAction targeted more than 30,000 repositories across 3,000 users and organizations. Attackers compromised about 1,900 GitHub accounts and attempted to extract 3,174 secrets from the CI environments of public repositories.

← Back to intelligence

GhostAction Compromised About 1,900 GitHub Accounts and Targeted Over 30,000 Repositories

The supply-chain attack campaign known as GhostAction targeted more than 30,000 repositories across 3,000 users and organizations. Attackers compromised about 1,900 GitHub accounts and attempted to extract 3,174 secrets from the CI environments of public repositories.