highMalware
OVHcloud CLI Compromised on GitHub to Distribute Backdoored Malware
Attackers inject information-stealing payload into open-source command-line tool, targeting developer credentials and infrastructure secrets
Cyber.TechVoid1 min read
Key Takeaways
- OVHcloud's open-source CLI was compromised in a supply chain attack on GitHub.
- A backdoored version of the tool was distributed, designed to steal developer secrets and credentials.
- The exact compromise method remains unverified but likely involves account or pipeline hijacking.
- Users should verify installation integrity and download only from official sources.
Related Security News
highCyber Attacks
Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
Security researchers have identified a recurring social engineering pattern in which threat actors leverage Microsoft Teams' external chat creation feature to conduct impersonation scams and deliver malware or ransomware. The attacks involve the use of throwaway tenants and fake IT support identities to appear legitimate, targeting Microsoft Teams users globally. While the exact number of cases and specific threat actor groups remain unconfirmed, hundreds of incidents have been documented.
The Hacker News1 min read
