RU-APT-ChainReaver-L Hijacks Trusted Sites, GitHub In Supply Chain Attack

Back Cyberpress

RU-APT-ChainReaver-L Hijacks Trusted Sites, GitHub In Supply Chain Attack

Cyberpress • February 12, 2026

Share: View original

This campaign is the work of a state- Advanced Persistent Threat (APT) group, which has infiltrated trusted platforms such as GitHub and ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

RU-APT-ChainReaver-L Targets Trusted Websites and GitHub Repositories The RU-APT-ChainReaver-L campaign has launched a sophisticated supply chain attack, compromising trusted mirror websites and GitHub repositories. This attack affects users on Windows, macOS, and iOS platforms, utilizing advanced techniques such as code signing with valid certificates and deceptive redirect chains. 4 sources 37

Extracted Entities

APT Groups (1)

RU-APT-ChainReaver-L

Attack Types (1)

Supply Chain Attack

MITRE ATT&CK (1)

T1195 - Supply Chain Compromise

Platforms (1)