Vendor
Fly.io
- First Reported
- Nov 12, 2026
- Latest Reported
- Nov 12, 2026
Reported Context (1)
- Some of the stolen tokens were issued to the Fly.io GitHub App. The attackers are using the Fly.io GitHub App as part of this campaign. On 173 of the probe pull requests, opened from 19 accounts, GitHub records that the WFX GitHub Actions Stealer Uses Stolen Tokens to Harvest Secrets
Malware (1)
MITRE ATT&CK (14)
Vendors (5)
Products (7)
Tools (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.