Technology ❯ Cybersecurity ❯ Data Exfiltration

Credential Theft

Malicious Code One-Time Passwords Cloud Security User Data Collection Public Repositories Cloud Credentials Living-off-the-Land Binaries Environment Variables GitHub Actions Cloud Services

Supply-Chain Malware Tampered With Awesome Motive Plugin Scripts

Injected CDN JavaScript created hidden admin accounts, installing backdoor plugins that require server-side scans and full credential rotation.

CloudZ Malware Hijacks Microsoft Phone Link to Steal SMS Codes and Credentials

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

Bitwarden CLI npm Release Briefly Backdoored in Supply-Chain Campaign

Mosyle Uncovers Two Undetected macOS Threats Targeting Developer and Cloud Credentials

Microsoft Links China-Linked Storm-1175 to Fast Zero-Day Exploits in Medusa Ransomware Campaigns

LevelBlue Publishes IOCs on Fileless AsyncRAT Attack Exploiting ScreenConnect