Hackers Turn 50+ Dormant GitHub Accounts Into a Network for Corporate Source Code Recon

Research has uncovered coordinated campaigns that use more than dormant GitHub accounts to map corporate organizations, repositories, and developers. The activity relies on GitHub’s API to collect public information. However, some operators have also attempted to access private source code repositories and, in rare cases, succeeded. The campaigns have been active since at least October. […]

The post .