Documenting technical details and payload analysis here: https://safedep.io/shai-hulud-second-coming-supply-chain-attack/ https://safedep.io/shai-hulud-second-c

Documenting technical details and payload analysis here: https://safedep.io/shai-hulud-second-coming-supply-chain-attack/ https://safedep.io/shai-hulud-second-coming-supply-chain-att... Like previous variant, it has credential harvesting, self-replication and GitHub public repository based exfiltration. Double base64 encoded credentials being exposed using GitHub repositories: https://github.com/search?q=%22Sha1-Hulud%3A%20The%20Second%20Coming%22&type=repositories https://github.com/search?q=%22Sha1-Hulud%3A%20The%20Second%...