Gheist campaign plants secret-dumping workflows using stolen GitHub tokens(wiz.io)
44 points by acossta | 0 comments
Wiz Research blog post analyzing Gheist, a campaign using stolen GitHub tokens to plant workflows that dump repository secrets, with IOCs and response guidance.