Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

Security researchers have uncovered a troubling trend where attackers are exploiting dormant GitHub accounts to blend in while mapping out corporate organizations' GitHub repositories and user accounts. These "ghost" accounts, often inactive for years, are being used alongside compromised OAuth tokens to evade detection. This strategy highlights a growing concern about how attackers are leveraging lesser-known accounts to gather sensitive information. The implications are significant, as these stealthy methods could lead to more sophisticated and harder-to-detect breaches.