wfx-loot campaign steals CI and cloud secrets via GitHub
Aikido says secrets were taken from at least 1,835 targets after probes of 61,764 repositories.
78
Product
docker-env
- Mentions · 7d1
- Mentions · 30d1
- All mentions1
- First seenNov 12, 2026
- Last mentioned11h ago
Timeline
1 articles · newest firstAppears with
- Aikidoorganization · 1
- GitHub Actionsproduct · 1
- WebdriverIOvictim · 1
- Nextcloudvictim · 1
- wfx-lootmalware · 1
- neuronai-studioproduct · 1
- US General Services Administrationvictim · 1
- GitHubvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.