GitHub Users Conned for Credentials Through Phishing Messages
Tricked and targeted by a Sawfish phishing campaign, GitHub users are conned to steal their GitHub login credentials and time-based one-time password or TOTP codes.
GitHub SIRT mentioned in a blog ...