New MuddyWater Campaign Hits Israeli Targets
The victims in Israel span multiple industries, including technology, engineering, manufacturing, local government, and education.
All topics
The victims in Israel span multiple industries, including technology, engineering, manufacturing, local government, and education.
Researchers from Wiz are currently tracking more than 25,000 affected repositories across approximately 350 unique users.
Researchers say that all three campaigns are being driven at least in part by one threat actor.
Cisco’s Talos threat intelligence team said this campaign is the work of an actor it tracks as UAT4356, an APT team that has previously targeted ASA devices.
The incident is a pointed example of how an intrusion at a key point in the software supply chain can have a wide range of downstream effects.
LastPass researchers who found the “ongoing, widespread” campaign said that it involves two fake GitHub pages that deliver the Atomic Stealer malware.