These attacks target suppliers to indirectly compromise their customers. The video mentions a recent discovery of a network of thousands of GitHub accounts distributing malware disguised as legitimate code.