Slow fog: Grafana was recently suspected of being attacked
According to online reports, 23pds, chief information security officer of Slowfog Technology, issued a document on the X platform saying that the open source data visualization tool Grafana was suspected to have been attacked recently. The attacker used Gato-X to steal confidential signatures and used App tokens to attack multiple codebases. This workflow has a potentially related application private key, and suspected attackers use carefully crafted branch names to inject JavaScript code and steal confidential information.
Disclaimer: The views in this article are from the original Creator and do not represent the views or position of Hawk Insight. The content of the article is for reference, communication and learning only, and does not constitute investment advice. If it involves copyright issues, please contact us for deletion.
