Threat Actor
Miasma
- First Reported
- Jun 8, 2026
- Latest Reported
- Jul 7, 2026
Reported Context (2)
- The article identifies Miasma and Hades as the same evolving threat actor. It says Miasma planted configuration files that ran a credential harvester when a repository was opened in an AI coding tool. StepSecurity Adds GitHub Actions Policy and Detection for Secret Exfiltration
- Step Security identifies the Hades Campaign as the latest evolution of Miasma's activity, including credential harvesting, GitHub-based C2 and exfiltration, lateral spread, and package supply-chain compromise. Step Security Details Hades Campaign Targeting PyPI Packages and CI Secrets
Threat Actors (1)
MITRE ATT&CK (16)
Vendors (2)
Products (5)
Industries (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.