Private repos still leak secrets to Gheist, a stolen GitHub token campaign

Wiz Research has recovered more than 13,500 planted branches from 850+ compromised GitHub accounts, the work of a campaign it calls Gheist, after the user agent the tool sends with its GitHub API requests. The tool takes a stolen token, finds every repository…

Preview courtesy of Help Net Security. The full article opens on their site.