Github got Hacked by CATS

John Hammond · 17 min

The video walks through the recent Team PCP software supply chain campaign, including the compromise of a GitHub developer via a poisoned VS Code extension and the open-sourcing of the Shai-Hulud worm. It shows how to use Flare's threat intelligence platform to search dark web and cybercrime sources for indicators of compromise and MITRE ATT&CK mappings. It also demonstrates importing that intelligence into a local OpenCTI instance.