Exaforce says GitHub token theft and vishing drain data in minutes
A dormant OAuth token pulled 472 of 638 repositories; ClickFix and help-desk vishing followed the same pattern.
36
Organization
Exaforce
- Mentions · 7d0
- Mentions · 30d1
- All mentions1
- First seenOct 22, 2026
- Last mentioned19d ago
Timeline
1 articles · newest firstAppears with
- Microsoftvendor · 1
- GitHub Desktopproduct · 1
- Shai-Huludmalware · 1
- Claude Codeproduct · 1
- Oktavendor · 1
- npmproduct · 1
- GitHubvendor · 1
- Scattered Spiderthreat actor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.