#tiledesk — Public Fediverse posts

So basically, all your CI/CD tokens are compromised if you pulled the poisoned version of Tiledesk, and it infects some of your other repos via CI/CD, but it ends there unless your stolen tokens sits around and is used to gain access to other things. But other than that, it doesn't continue to propagate does it?

#Megalodon #Malware #TileDesk

So basically, all your CI/CD tokens are compromised if you pulled the poisoned version of Tiledesk, and it infects some of your other repos via CI/CD, but it ends there unless your stolen tokens sits around and is used to gain access to other things. But other than that, it doesn't continue to propagate does it?

#Megalodon #Malware #TileDesk

So basically, all your CI/CD tokens are compromised if you pulled the poisoned version of Tiledesk, and it infects some of your other repos via CI/CD, but it ends there unless your stolen tokens sits around and is used to gain access to other things. But other than that, it doesn't continue to propagate does it?

#Megalodon #Malware #TileDesk

So basically, all your CI/CD tokens are compromised if you pulled the poisoned version of Tiledesk, and it infects some of your other repos via CI/CD, but it ends there unless your stolen tokens sits around and is used to gain access to other things. But other than that, it doesn't continue to propagate does it?

#Megalodon #Malware #TileDesk

So basically, all your CI/CD tokens are compromised if you pulled the poisoned version of Tiledesk, and it infects some of your other repos via CI/CD, but it ends there unless your stolen tokens sits around and is used to gain access to other things. But other than that, it doesn't continue to propagate does it?

#Megalodon #Malware #TileDesk

Can someone clarify how the #Megalodon malware spread?

So it initially came from #Tiledesk and anyone who pulled Tiledesk recently and caught the malware then caused it to spread further...?

I'm not entirely clear on how it spread to other repositories, but it seems tokens were stolen along the way. Is the trigger only when other people have a specific CI/CD workflow and push to main/master? A bunch of the infected repos don't have any other recent changes so I'm unclear on the spread.

Can someone clarify how the #Megalodon malware spread?

So it initially came from #Tiledesk and anyone who pulled Tiledesk recently and caught the malware then caused it to spread further...?

I'm not entirely clear on how it spread to other repositories, but it seems tokens were stolen along the way. Is the trigger only when other people have a specific CI/CD workflow and push to main/master? A bunch of the infected repos don't have any other recent changes so I'm unclear on the spread.

Can someone clarify how the #Megalodon malware spread?

So it initially came from #Tiledesk and anyone who pulled Tiledesk recently and caught the malware then caused it to spread further...?

I'm not entirely clear on how it spread to other repositories, but it seems tokens were stolen along the way. Is the trigger only when other people have a specific CI/CD workflow and push to main/master? A bunch of the infected repos don't have any other recent changes so I'm unclear on the spread.

Can someone clarify how the #Megalodon malware spread?

So it initially came from #Tiledesk and anyone who pulled Tiledesk recently and caught the malware then caused it to spread further...?

I'm not entirely clear on how it spread to other repositories, but it seems tokens were stolen along the way. Is the trigger only when other people have a specific CI/CD workflow and push to main/master? A bunch of the infected repos don't have any other recent changes so I'm unclear on the spread.

Can someone clarify how the #Megalodon malware spread?

So it initially came from #Tiledesk and anyone who pulled Tiledesk recently and caught the malware then caused it to spread further...?

I'm not entirely clear on how it spread to other repositories, but it seems tokens were stolen along the way. Is the trigger only when other people have a specific CI/CD workflow and push to main/master? A bunch of the infected repos don't have any other recent changes so I'm unclear on the spread.

RE: https://infosec.exchange/@jerry/116624419182616764

Heads up for anyone who uses Tiledesk chat.

#Megalodon #TileDesk #Malware

RE: https://infosec.exchange/@jerry/116624419182616764

Heads up for anyone who uses Tiledesk chat.

#Megalodon #TileDesk #Malware

RE: https://infosec.exchange/@jerry/116624419182616764

Heads up for anyone who uses Tiledesk chat.

#Megalodon #TileDesk #Malware

RE: https://infosec.exchange/@jerry/116624419182616764

Heads up for anyone who uses Tiledesk chat.

#Megalodon #TileDesk #Malware

RE: https://infosec.exchange/@jerry/116624419182616764

Heads up for anyone who uses Tiledesk chat.

#Megalodon #TileDesk #Malware