Dec 14, 03:37 AM

Over 390,000 WordPress Credentials Stolen via Malicious GitHub Repository in Yearlong Supply-Chain Attack Targeting Security Pros

A significant cybersecurity breach has been reported, involving the theft of over 390,000 WordPress credentials through a malicious GitHub repository. This yearlong supply-chain attack specifically targeted security professionals, including experienced researchers and penetration testers. The compromised repository was disguised as a benign publishing tool, leading to the exfiltration of sensitive credentials. The incident highlights ongoing vulnerabilities in the cybersecurity landscape, particularly for those tasked with safeguarding digital environments.

#WordPress #GitHub

Written with ChatGPT (GPT-4o mini).

Sources

The Hacker News@TheHackersNews
2 years ago
🚨 A Trojan Hidden in Plain Sight! Over 390,000 WordPress credentials were exfiltrated by a malicious GitHub repository disguised as a harmless publishing tool. The victims? Even seasoned security researchers and pentesters. 🛡️ Here’s what happened—Phishing emails and trojanized… https://t.co/XumspYQU3V
Nicolas Krassas@Dinosn
2 years ago
390,000+ WordPress Credentials Stolen via Malicious GitHub Repository Hosting PoC Exploits https://t.co/62ROTkmDtk
Slashdot@slashdot
2 years ago
Yearlong Supply-Chain Attack Targeting Security Pros Steals 390,000 Credentials https://t.co/lMqY6kIewK

Over 390,000 WordPress Credentials Stolen via Malicious GitHub Repository in Yearlong Supply-Chain Attack Targeting Security Pros

Sources

Additional media