Skip to content
securitytabs

Covered by 2 outlets — first reported by The Hacker News, Oct 20, 08:21 UTC

Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware

MentionsGitHub

In brief

An attacker used a contributor's GitHub account to replace the download archives on five existing releases of OVHcloud's command-line tool on Monday, October 19. The account had been hijacked, and the new files were a build designed to steal secrets stored on the disk of any machine that runs it, the cloud provider says. They were live on GitHub for up to 94 minutes, from 12:47 to 14:21 UTC,

From The Hacker News's coverage.

Continue reading

2 outlets, in the order they reported it.

  1. The Hacker NewsFirst report

    Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware

    An attacker used a contributor's GitHub account to replace the download archives on five existing releases of OVHcloud's command-line tool on Monday, October 19.

    Read at The Hacker News Details

  2. BleepingComputer

    OVHcloud CLI releases backdoored on GitHub to steal developer secrets

    French cloud and hosting provider OVHcloud is warning users that attackers compromised its open-source command-line interface (CLI) tool to distribute information-stealing malware.

    Read at BleepingComputer Details

Explained

The technology and terms in this story. Learn more