/
initial_access_vector:phishing × threat_actors:GhostAction × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · high

GhostAction operators phish GitHub maintainers and plant font-disguised stealer in 94 repositories

The threat actor behind the GhostAction supply chain campaign has expanded beyond malicious GitHub Actions workflows. According to OpenSourceMalware, it now phishes open-source maintainers and plants a second-stage credential stealer disguised as a font file. The shift appears to follow GitHub's October 9 block on the malicious workflow, …

GhostAction technology software development
securityaffairs.com · medium

Security Affairs Malware Newsletter Round 119: IronChain, XWorm, PEERSTITCH, GhostAction and iOS exploit chain research

The Security Affairs Malware Newsletter Round 119 is a weekly digest of malware research published by Pierluigi Paganini. It lists reports on IronChain ransomware, the evolution of XWorm from infostealer to surveillance platform, and the Hirudo banking malware spread through fake updates and patched banking apps. It also covers PEERSTITCH…

GhostAction Silent Lynx