390,000+ WORDPRESS CREDENTIALS STOLEN VIA MALICIOUS GITHUB REPOSITORY HOSTING POC EXPLOITS

Summary from the TLDR InfoSec newsletter

A GitHub repository hosting a WordPress tool was used to steal over 390,000 credentials by a threat actor named MUT-1244. The attacker targeted security researchers and pentesters, exfiltrating sensitive data like SSH keys and AWS access keys. The malicious campaign involved phishing, trojanized GitHub repositories, and a cryptocurrency miner payload.