VercelCEO updates security incident investigation progress: Attackers have distributed malware on a wider scale

Guillermo Rauch, CEO of front-end cloud platform Vercel, tweeted that the team has completed an in-depth security investigation and analyzed nearly 1PB of complete Vercel network and API logs, far exceeding the original Context.ai account intrusion.<br /> Investigations revealed that the attackers were operating beyond Context.ai and had distributed malware on a wider scale, with the goal of stealing account keys on platforms such as Vercel. Once the key is obtained, the attacker quickly and comprehensively enumerates non-sensitive environment variables. Measures currently taken include deepening cooperation with industry partners such as Microsoft, AWS, and Wiz to jointly protect the broader Internet ecosystem; other suspected victims have been notified, recommending immediate rotation of credentials and strengthening security best practices.