Supply Chain Attackers Escalate With GitHub Dependabot Impersonation
Armed with stolen developer passcodes, attackers have checked in changes to repositories under the automation feature's name in an attempt to escape notice.
Stay updated with breaking news from Dropbox Github. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
Armed with stolen developer passcodes, attackers have checked in changes to repositories under the automation feature's name in an attempt to escape notice.
Popular file hosting service Dropbox recently suffered a data breach that gave threat actors access to 130 of its code repositories. This was after Dropbox employees fell victim to a phishing scam.
Dropbox has suffered a data breach after employees fell for a phishing attack. The hackers gained access to source code and personal data.
A phishing attack used emails pretending to be from CircleCI to target Dropbox employees
The attackers carried out a phishing attack and gained employee login credentials to CircleCI, which they then used to access GitHub