Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
15 IOCs
OVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found
Excerpt
OVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found - StepSecurity Skip to main content Platform Platform Overview Dev Machine Guard Code Repo Security Secure Registry CI/CD Security Threat Intel Customers Pricing Resources Blog Product Tour Dev Machine Guard on GitHub Harden Runner on GitHub GitHub Actions Audit Documentation Company About Us Newsroom Trust Center Request a Demo Login Platform Platform Overview Dev Machine…
Read the original report →Diamond Model
Adversary
Infrastructure(2)
Capability
Victim
Indicators of Compromise
Open the mindmap →15 indicators
IOC Relationship Graph
Building graph…