Threat Actor
Hades
- First Reported
- Jul 7, 2026
- Latest Reported
- Jul 7, 2026
Reported Context (1)
- The article identifies Hades and Miasma as the same evolving threat actor. It reports that Hades used a GitHub token to commit workflows that dumped repository secrets into an artifact, then downloaded the artifact and deleted the run and branch. StepSecurity Adds GitHub Actions Policy and Detection for Secret Exfiltration
Threat Actors (1)
Vendors (2)
Products (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.