tlo.ac News

Hacking

GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories

Internet · 2026-10-19

The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake font file. The latest…

Read at Internet↗

Headline from NewsAPI.

More