Loading threat actor…
Chaos Agent is the name used for a February 2026 software supply chain intrusion campaign targeting developer environments and CI/CD trust zones. The actor exploited GitHub Actions workflows, specifically abuse of the pull_request_target permission model, to trigger malicious code execution and harvest secrets from repositories. Reported targets included repositories associated with major technology and security vendors, and at least one incident resulted in theft of a Personal Access Token followed by repository takeover. The actor is also associated with compromise of the Trivy VS Code extension distributed through Open VSX, including malicious modifications to versions 1.8.12 and 1.8.13. In that operation, the implanted code abused locally installed AI coding command-line tools and the victim’s authenticated developer tooling to collect system data and exfiltrate sensitive information. This activity has been linked to CVE-2026-28353 and is notable for weaponizing AI coding assistants within developer workstations rather than focusing on traditional production infrastructure. Across the observed activity, Chaos Agent focused on high-value developer secrets such as environment variables, repository credentials, and authentication tokens. The campaign emphasized post-compromise collection and exfiltration over persistence, leveraging trusted development workflows and extension ecosystems to evade scrutiny. The available evidence supports credential theft, initial access through workflow abuse, post-exploitation within developer environments, and exfiltration of sensitive data. No high-confidence attribution to a nation state or specific country of origin is currently available.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
5 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.