Report: Trivy-Linked Attackers Breached Cisco Development Environment, Cloned 300+ Repositories
Summary
BleepingComputer reports that attackers used credentials stolen in the Trivy supply-chain compromise to access Cisco’s development environment and clone 300+ GitHub repositories. Cisco isolated systems and began reimaging and credential rotation; Cisco had not responded
Key points
- BleepingComputer reports that attackers used a malicious GitHub Action linked to the Trivy compromise to steal CI/CD credentials and access Cisco’s development environment.
- More than 300 repositories were reportedly cloned, including AI product code, unreleased products, and some customer repositories.
- Multiple AWS keys were reportedly stolen and used for unauthorized activity in a small number of Cisco AWS accounts.
- Cisco isolated affected systems, began reimaging, and started wide-scale credential rotation; the initial breach was reported contained.
- Researchers linked the supply-chain attacks to TeamPCP based on use of the TeamPCP Cloud Stealer; related compromises involved LiteLLM and Checkmarx KICS.
- Cisco had not responded to BleepingComputer’s questions at the time of publication.
Article Details
- Victim Organization
- Cisco
- Incident Type
- Reported supply-chain-enabled compromise of Cisco's internal development environment, involving credential theft, source-code repository cloning, and unauthorized AWS account activity.
- Data Types Exposed
- Source code
- CI/CD credentials
- AWS keys
- Affected Records
- More than 300 GitHub repositories were reportedly cloned.
- Affected Data Size
- Unknown
- Operational Impact
- The breach reportedly affected dozens of devices, including developer and lab workstations. Cisco isolated affected systems, began reimaging them, and started wide-scale credential rotation. Multiple AWS keys were reportedly used for unauthorized activity across a small number of Cisco AWS accounts.
- Ransom Or Extortion
- Unknown
- Claim Status
- alleged
MITRE ATT&CK
T1078.004 · Cloud AccountsStolen AWS keys were reportedly used to perform unauthorized activity in a small number of Cisco AWS accounts.T1195.002 · Compromise Software Supply ChainThe article reports that attackers compromised the Trivy project's GitHub pipeline and used a malicious GitHub Action in the supply-chain attack.
Threat Actors
Malware
Vendors
Amazon Web ServicesMultiple AWS keys were stolen and used to perform unauthorized activities across a small number of Cisco AWS accounts.GitHubto breach Cisco’s internal development environment and exfiltrate source code from more than 300 GitHub repositories, including AI product code and some customer repositories.
Products
AI AssistantsMore than 300 GitHub repositories were cloned, including source code for AI Assistants, AI Defense, and unreleased products.AI DefenseMore than 300 GitHub repositories were cloned, including source code for AI Assistants, AI Defense, and unreleased products.GitHub Actionsthe project’s GitHub pipeline to distribute credential-stealing malware through official releases and GitHub Actions.KICSThe group also compromised the LiteLLM PyPI package, which impacted tens of thousands of devices, and the Checkmarx KICS project to deploy the same information-stealing malware.LiteLLMCisco has isolated affected systems, begun reimaging and wide-scale credential rotation, and expects continued fallout linked to follow-on LiteLLM and Checkmarx supply chain attacks.