Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign

SecurityWeekNovember 12, 2026Identity Threat Intel

Using thousands of hijacked accounts, the wfx-loot campaign planted a CI secret stealer that ran in over 1,800 GitHub repositories. The post Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign appeared first on SecurityWeek .

Summary from SecurityWeek.

Read the full article at SecurityWeek

Explained

The technology and terms in this story. Learn more

AttackInfostealerMalware that grabs saved passwords, browser cookies and crypto wallets from an infected computer.

Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign

Explained

More in Identity

Self-hosted Claude Managed Agents keeps agent credentials in your environment

International operation dismantles malware networks, exposes 6.4 million stolen credentials

Weak Passwords Expose SQL Servers to Cryptominer and Gh0st RAT

Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass

Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)