MEDIUMData Breach
Global
GitHub Hacked, Internal Repositories Offered for Sale
·Source: Bank Info Security
Updated:
Executive Summary
A Single Developer Downloaded a Poisoned VS Code Extension, and Now Look GitHub warned late Tuesday that hackers stole roughly 3,800 internal repositories from the Microsoft-owned platform after a developer used a poisone
Analysis
A Single Developer Downloaded a Poisoned VS Code Extension, and Now Look GitHub warned late Tuesday that hackers stole roughly 3,800 internal repositories from the Microsoft-owned platform after a developer used a poisoned VS Code script, which is developed by Microsoft. TeamPCP and Lapsus$ appear to be cooperating to sell the stolen data for $95,000.