Update: Gitloker Attacks Abuse GitHub Notifications to Push Malicious OAuth Apps

Threat actors are impersonating GitHub's security and recruitment teams in phishing attacks. They hijack repositories using malicious OAuth apps, wiping compromised repos as part of an ongoing extortion campaign.