How attackers might use GitHub Codespaces to hide malware delivery
A feature that allows developers to make applications accessible by a public GitHub URL could enable attackers to deliver malware and avoid detection.
Stay updated with breaking news from Automated Libra. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
A feature that allows developers to make applications accessible by a public GitHub URL could enable attackers to deliver malware and avoid detection.
South Africa based hacker group “Automated Libra” is behind an elaborate crypto mining scheme which has cost major cloud providers, including Microsoft and Salesforce, millions of dollars in resources and unpaid bills.
Cybercriminal group Automated Libra's PurpleUrchin campaign uses the fake accounts for cryptomining operations.
In showing how threat actor group Automated Libra bypassed CAPTCHA, used freejacking techniques to set up phony cloud sites, and then leveraged DevOps to launch cryptomining attacks, security researchers point to the increased sophistication of the threat actors.
The Automated Libra group is deploying all components of its campaign in an automated manner via containers, stealing free trial resources for cryptomining, but the threat could get larger.