Threat actor
GhostAction
Tracked by CyberSIXT since 9 Oct
- Articles · all time
- 3
- Articles · last 30 days
- 3
- CVEs exploited · attributed
- 0
- Research reports · all time
- 3
Names and sources
- GhostAction
- Named by CyberSIXT coverage
- GhostAction
- Named by Malpedia · ghostaction
- GhostAction
- Named by MISP Galaxy · 98ff9870-3da1-4642-be8c-df6834623b23
- ghostaction
- Named by CyberSIXT coverage
- 98ff9870-3da1-4642-be8c-df6834623b23
- Named by CyberSIXT coverage
- GhostAction Hides Credential Stealer in a Font Across 94 GitHub ReposThe Hacker News
- GhostAction Hackers Hijack 1,900 GitHub Accounts to Steal SecretsThe Hacker News
- GhostAction Hijacks Maintainer Accounts to Steal Secrets From GitHub RepositoriesThe Hacker News · first in our coverage