Vercel CEO: Vercel's security investigation revealed that attackers obtained account keys by distributing malware, with an impact exceeding initial expectations.

Vercel CEO Guillermo Rauch stated in a post on the X platform that the team has conducted an in-depth analysis of the recent security incident. The investigation revealed that threat actors distributed malware on computers to search for Vercel accounts and other service provider keys. Once they obtained the keys, the attackers performed large-scale operations via APIs, focusing on enumerating non-sensitive environment variables. Vercel has expanded its collaboration with industry partners such as Microsoft, AWS, and Wiz, and has notified other suspected victims. Vercel has released several product enhancements, and further updates on the investigation will be provided through security bulletins.