According to ChainCatcher, 23pds, the Chief Information Security Officer of SlowMist Technology, posted on X platform that the open-source data visualization tool Grafana appears to have been recently attacked. The attackers used Gato-X to steal confidential signatures and used App tokens to attack multiple code repositories. This workflow has a potentially related application private key, and the suspected attackers used carefully designed branch names to inject JavaScript code and steal confidential information.
SlowMist: Grafana is suspected of being attacked recently
This article is machine translated
Show original
Source
Disclaimer: The content above is only the author's opinion which does not represent any position of Followin, and is not intended as, and shall not be understood or construed as, investment advice from Followin.
Like
Add to Favorites
Comments
Share


