#OpenSourceMalware

GhostAction hides credential stealer as font file in 94 GitHub repositories

After GitHub blocked its malicious workflow, the GhostAction operator turned to phishing developers and planting a stealer disguised as a web font, researchers say.

1h ago