RE: https://infosec.exchange/@DarkWebInformer/117480270425788178
A dev installing malware on a personal device.
Most of the time there's no visibility on these.
This has to change
🚨🇫🇷 GlassWorm-linked actors hijacked OVHcloud CLI releases to spread credential-stealing malware A compromised developer GitHub account was used to replace binaries attached to OVHcloud CLI releases v0.11.0 through v0.15.0 on October 19. ⠀ The malicious downloads were available b
Infosec ExchangeDark Web Informer :verified_paw: (@[email protected])Attached: 1 image
🚨🇫🇷 GlassWorm-linked actors hijacked OVHcloud CLI releases to spread credential-stealing malware
A compromised developer GitHub account was used to replace binaries attached to OVHcloud CLI releases v0.11.0 through v0.15.0 on October 19.
⠀
The malicious downloads were available between 12:47 and 14:21 UTC and were downloaded approximately 250 times. Only users who installed or