It is being reported that the code repository platform, Bitbucket, is being used by cyber criminals to host and distribute malware in a number of campaigns.
Criminals have been delivering an “unprecedented number of malware” via Bitbucket according to a report by Cybereason researchers. The malicious repositories mentioned in the linked blog post were deactivated within a few hours following communication between the researchers and Bitbucket.
Cybereason report that attackers create and cycle different accounts, which are then frequently updated to avoid detection..
Users that have downloaded cracked versions of commercial software like Microsoft Office and Adobe photoshop may have been affected.