← All news

Software

GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories

The threat actor behind the GhostAction supply chain attack has expanded beyond injecting malicious GitHub Actions workflows into compromised projects to phish open-source developers and deliver a stealer malware disguised within a fake font file.

Read the full story on The Hacker News.

Read at source (opens in a new tab)

Latest from The Hacker News

Latest digest

Week 42 EN

Open the digest

Sources

72 active sources

27 Turkish · 45 English

All sources