Vercel CEO updates on the security incident investigation: attackers have distributed malware on a broader scale

Mars Finance reports that Vercel, the front-end cloud platform, CEO Guillermo Rauch tweeted that the team has completed an in-depth security investigation, analyzing nearly 1 PB of complete Vercel network and API logs, far exceeding the scope of the initial Context.ai account intrusion incident.
The investigation shows that the attacker’s activity extends beyond Context.ai and has distributed malware on a broader scale, aiming to steal account keys for platforms like Vercel.
Once the keys are obtained, the attacker will quickly and comprehensively enumerate non-sensitive environment variables.
Current measures include deepening cooperation with industry partners such as Microsoft, AWS, and Wiz to jointly protect a wider internet ecosystem;
Other suspected victims have been notified, and it is recommended to immediately rotate credentials and strengthen security best practices.