Abusing a GitHub Codespaces Feature For Malware Delivery

Proof of Concept (POC): We investigate one of the GitHub Codespaces’ real-time code development and collaboration features that attackers can abuse for cloud-based trusted malware delivery. Once exploited, malicious actors can abuse legitimate GitHub accounts to create a malware file server.

abuse abusing accounts attackers cloud cloud-based code codespaces collaboration concept delivery development exploited features file github github codespaces malicious malicious actors malware poc reports server trend micro research : articles trend micro research : cloud trend micro research : cyber threats trend micro research : malware