Tool
GitHub Code Search
- First Reported
- Jul 22, 2026
- Latest Reported
- Jul 22, 2026
Reported Context (1)
- GitHub Code Search for the campaign’s unique DNSHook hostname, a callback domain that records DNS lookups to confirm command execution, surfaced roughly 6,100 campaign-linked workflow files across unrelated repositories. Compromised GitHub Actions Repositories Fuel cPanel/WHM Exploitation and Credential Theft
CVE (1)
People (1)
MITRE ATT&CK (16)
Vendors (2)
Products (4)
Tools (1)
Industries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.