Story thread · 2 reports / 2 sources

Coder's registry infrastructure compromised to push malicious modules

bleepingcomputer.com · 11dShare

Attackers compromised Coder's Cloudflare infrastructure and added unauthorized registry servers that delivered malicious Terraform modules containing credential-stealing code. [...]

First report: Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages — thehackernews.com, 12d