GitHub Platform Attacked by Hackers, Millions of Microsoft Users Threatened!

Liputan6.com, Jakarta – Development platform software based cloud from Microsoft, GitHub, faced a large-scale cyberattack, the attack potentially endangering millions of users.

Security researchers at Apiiro have identified the attack in which malicious actors targeted GitHub repositories, potentially compromising more than 100,000 projects.

Quoted from GizmoChinaMonday (4/3/2024), this attack involved a technique called “malicious repository obfuscation” Where hackers clone a legitimate repository, inject the malicious code, and upload it back to GitHub.

These tampered repositories can then be downloaded by unsuspecting Microsoft users, potentially compromising their systems or infecting them with malware.

The report from Apiiro highlights several factors that make GitHub vulnerable to such attacks.

Ease of use platformsabundant APIs, and the presence of many hidden repositories make it easy for hackers on GitHub to deploy these attacks.

In this attack, the attacker targets popular and frequently downloaded repositories. Hackers insert malicious code into this repository and then re-upload it.

To expand their reach, attackers create many fork fake from a compromised repository using automated methods.

Forks This fake can then be spread through social media, forums on lineand other channels–tricking users into downloading these malicious repositories.

The report says that the GitHub application has been notified and has removed most of the identified malicious repositories.