GhostAction attack using GitHub and GitLab lookalike domains

发生了什么

OSM has identified a new evolution of the GhostAction attack, which targets GitHub users via malicious CI workflow files and worm-like behaviour

摘要按规则整理自下方来源原文

来源